last executing test programs: 7m46.449498406s ago: executing program 3 (id=3668): timer_create(0x7, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) shutdown(r1, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config\x00') sched_setscheduler(0x0, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, 0x0, 0x0, 0x0) semop(r3, &(0x7f0000001240), 0x0) semop(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) shutdown(r4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 7m45.629519719s ago: executing program 32 (id=3668): timer_create(0x7, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) shutdown(r1, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config\x00') sched_setscheduler(0x0, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, 0x0, 0x0, 0x0) semop(r3, &(0x7f0000001240), 0x0) semop(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) shutdown(r4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 4m10.176779062s ago: executing program 33 (id=4347): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m50.85473158s ago: executing program 34 (id=4607): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r5 = syz_open_dev$loop(0x0, 0x200005, 0xc0240) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m27.104019411s ago: executing program 35 (id=4642): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140)="0098bb3c76c3", 0x6, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2m20.202769882s ago: executing program 36 (id=4669): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in=@multicast2, 0x0, 0x1, 0x0, 0x6, 0x2, 0x0, 0x20, 0xaa, 0x0, 0xee01}, {0x6, 0x5, 0x2, 0x4, 0x1, 0x20fffe, 0x8, 0x7}, {0xfffffffffffffffe, 0x4, 0x7f}, 0xffffffff, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@remote, 0xc, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x5, 0x2, 0xb7, 0x2, 0xfffffffa, 0xc00}}, 0xe8) 1m59.703925024s ago: executing program 37 (id=4752): r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) 1m51.82656034s ago: executing program 38 (id=4774): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m40.861060776s ago: executing program 39 (id=4800): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x591c01, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000002000)='./file1\x00', 0x320a4ce, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2e0, &(0x7f0000000b40)="$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") mount(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x40000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60a40, 0x88) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() syz_genetlink_get_family_id$mptcp(&(0x7f0000001f40), r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) splice(r3, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r5, 0x0, r2, 0x0, 0x100000006, 0x0) fcntl$setpipe(r6, 0x407, 0xffffffffffff8001) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYRES8=r4], &(0x7f0000000f40)=""/4089, 0x89, 0xff9, 0x4}, 0x28) preadv(r7, &(0x7f0000001100)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x4, 0xfc000002) close_range(r0, 0xffffffffffffffff, 0x0) 1m33.811307198s ago: executing program 7 (id=4814): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'veth0_to_team\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) close(r0) 1m33.433502421s ago: executing program 7 (id=4815): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() listen(r1, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='debugfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2000000008, 0x0) 1m31.432037253s ago: executing program 7 (id=4817): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m31.045874162s ago: executing program 7 (id=4818): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0xf, 0x1, 0x3d2f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x3, 0xffff}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 1m30.263615164s ago: executing program 7 (id=4820): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x68840, 0x8) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x101) 1m29.163809799s ago: executing program 40 (id=4820): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x68840, 0x8) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x101) 1m26.758111868s ago: executing program 3 (id=4703): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c099}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x86b87}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m26.299437114s ago: executing program 3 (id=4825): connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'veth0_to_team\x00'}}, 0x1e) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) 1m26.170730492s ago: executing program 3 (id=4826): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m25.945038471s ago: executing program 3 (id=4827): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x120, 0x0, 0x148, 0x0, 0x148, 0x310, 0x240, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e1c, 0x4e20, 0x8, 0x2, 0x101, 0x100, 0xa22}}}, {{@ip={@multicast1, @multicast1=0xe000003f, 0xff000000, 0xff, 'hsr0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x60}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x7, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@dscp={{0x28}, {0x81, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x6768, 0xe, [0x5, 0x31, 0x23, 0x33, 0x12, 0x26, 0x8, 0x32, 0x12, 0x1c, 0x27, 0x31, 0x8, 0x3e, 0x31, 0x17], 0x1, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 1m25.430953098s ago: executing program 3 (id=4828): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0xf, 0x1, 0x3d2f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x3, 0xffff}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 1m25.090148463s ago: executing program 41 (id=4828): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0xf, 0x1, 0x3d2f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x3, 0xffff}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 1m23.919319113s ago: executing program 9 (id=4832): r0 = inotify_init1(0x80800) r1 = gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40000021, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e6574000000000500"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x2, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117, 0x0, 0x0, 0x8}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1m22.792716259s ago: executing program 9 (id=4833): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) close(0x3) 1m22.485304821s ago: executing program 9 (id=4834): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) 1m22.23654689s ago: executing program 9 (id=4835): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m22.059832324s ago: executing program 9 (id=4836): socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x120, 0x0, 0x148, 0x0, 0x148, 0x310, 0x240, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e1c, 0x4e20, 0x8, 0x2, 0x101, 0x100, 0xa22}}}, {{@ip={@multicast1, @multicast1=0xe000003f, 0xff000000, 0xff, 'hsr0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x60}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x7, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@dscp={{0x28}, {0x81, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x6768, 0xe, [0x5, 0x31, 0x23, 0x33, 0x12, 0x26, 0x8, 0x32, 0x12, 0x1c, 0x27, 0x31, 0x8, 0x3e, 0x31, 0x17], 0x1, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 1m21.591945066s ago: executing program 9 (id=4837): r0 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) pipe(0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x54}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x4, 0x80000800, 0x3, 0xe32d, 0x0, 0xf43, 0x5}, {0x800000000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x3, 0x0, 0x4, 0x1}, {{@in=@remote, 0x4, 0x32}, 0xa, @in6=@remote, 0x3501, 0x5, 0x0, 0x4, 0x6, 0x10000000, 0xfffffffd}}, 0xe8) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 1m20.821455867s ago: executing program 42 (id=4837): r0 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) pipe(0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x54}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x4, 0x80000800, 0x3, 0xe32d, 0x0, 0xf43, 0x5}, {0x800000000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x3, 0x0, 0x4, 0x1}, {{@in=@remote, 0x4, 0x32}, 0xa, @in6=@remote, 0x3501, 0x5, 0x0, 0x4, 0x6, 0x10000000, 0xfffffffd}}, 0xe8) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 55.417212466s ago: executing program 1 (id=4912): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4dd, &(0x7f0000000740)="$eJzs3E1sVNUeAPD/nX5DefTxeLwHohbR2GhsoaCwMDEYTVxoYsSFLpt+kEqhhtZECJEhMbg0JO6NS7cu3Ko748rExBUuTQwJMWwAV9fcmTvtdDozTNtpR9rfLxnmnHvPveeeOfecOfccpgHsWMPZP0nEYETcioi9EVGoTTBcfrt/9+rkg7tXJ6OYpmf/TLLD4l4WzyX5++48MlKIKHyaLO+osnD5yvmJubnpS3l8bPHCh2MLl6+8MHth4tz0uemL46dPnzxx/NRL4y+uvVB18svKde/QJ/OHD77x/s23Jrsr2/vz9+pytMtwDNe7lJJn2p1Zh+2pCifdzVK+svkXQ8uy+z+rrp5S+98bXdG08oBtJE3TtK/x7mJa6/qqLcAjK4lOXwHQGZUv+uz5t/KqNxDo3ZzhR8fdOVN+AMrKfT9/RTxZ2liZB+mpeb5tp+GIeK/415fZKzZpHgIAoNr3ZyojwZrx31DEgap0/8rXUIYi4t8RsS8i/hMR+yPiv1FO+7+I+H/N+bsiIm2S/3BNfPX4p3B7YyVsLhv/vZyvbS2P/6J6FWyoK4/tiagMmKeP5Z/JSPT0zczOTR9vkscPr/3yeaN91eO/7JXlXxkL5tdxu7tmgm5qYnFi3QWuced6xKHu2vIn3RHJ0kpAEhEHI+LQGs47VBWefe7rw0uRnpXpHl7+krTuOloblirSryKeLdd/MVbU/3KOSfP1ybH+mJs+NjYz21u6K1b76ecbbzfK/6Hl//b32kNeP/Xd2bxlbVxW/7uq7v+orN8ul38oiUiW1msX1p7Hjd8+a/hMs6r8Pa3d/73Ju6Vw5bn044nFxUvHI3qTN1dvH18+thLP3qNYLv/I0frtf19+TPZJPBYR2U38eEQ8EeUnxOFIrx2JiKci4miT8v/46tMftFz++vf/psnKP1W3/1tR/8vr9Y0CSbGcus6urvNHbj1o0Hm01v+dLIVG8i31+79kRRfR5EpXBDb6+QEAAMCjoBARg1VzSYNRKIyOlueA9seuwtz8wuLzM/MfXZwq/0ZgKHoKM7NzpZmu8nxwT1KZ/xyqio/XxE/k88ZfdA2U4qOT83NTHS05sLvU5pPC6FJfUG7/mT/aM8UM/JP5yQ/sXA9r/wdubtGFAFvO9z/sXFXtv9ggSdH/lIHtqZXvf3OBsD3Va//X1nEM8GhJtWXY0dbS/vUVsL10xztL4UJHrwTYar7TYUdq6Ufy6w6kffV39cfqxNHf/IRdsb7LGKiTV0cC2chqc7P49X65Umt2DaznhJW/ptAwTRRaOc/AUpH7oj11OrPxD+rcgbbf/Gm+PtbuOv1mS9ppvUDzfmN8cJM6JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDb7OwAA//++9tiz") open(0x0, 0x14927e, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x2, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 53.483741072s ago: executing program 1 (id=4922): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xffedfeff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) 52.854841997s ago: executing program 1 (id=4931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180200000300000000000000f9ffffff8500000007000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 51.723359873s ago: executing program 1 (id=4935): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4dd, &(0x7f0000000740)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(0x0, 0x4827e, 0x195) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x2, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 51.629959874s ago: executing program 8 (id=4936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) 50.93115364s ago: executing program 8 (id=4942): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000001080)=[@ioring_restriction_sqe_op], 0x1) 50.651942588s ago: executing program 1 (id=4945): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0xd25f8e34d7c46251, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) r2 = fcntl$dupfd(r1, 0x406, r1) sendmmsg$inet(r2, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="90", 0x1}], 0x1}}], 0x1, 0x20008004) 49.964170999s ago: executing program 8 (id=4949): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800e2"], &(0x7f0000001b00)=""/3, 0x3b, 0x3, 0x1, 0x7}, 0x28) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x5]}, 0x8, 0x800) 49.810085951s ago: executing program 1 (id=4951): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x87, &(0x7f0000000600)=ANY=[], 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x64, 0x24, 0xd0f, 0x170bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xe, 0xa}, {0xf, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xb1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48045}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{}, 0x2}}, 0x10) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000600)={0x91a00000, &(0x7f0000000100), &(0x7f0000000200), &(0x7f00000002c0), {0x2b}, &(0x7f00000003c0)=""/139, 0x8b, &(0x7f0000000480)=""/241, &(0x7f0000000580)=[r4], 0x1, {r5}}, 0x58) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/keys\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/205, 0xcd}], 0x1, 0x1c4, 0x0) 48.052904057s ago: executing program 43 (id=4951): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x87, &(0x7f0000000600)=ANY=[], 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x64, 0x24, 0xd0f, 0x170bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xe, 0xa}, {0xf, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xb1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48045}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{}, 0x2}}, 0x10) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000600)={0x91a00000, &(0x7f0000000100), &(0x7f0000000200), &(0x7f00000002c0), {0x2b}, &(0x7f00000003c0)=""/139, 0x8b, &(0x7f0000000480)=""/241, &(0x7f0000000580)=[r4], 0x1, {r5}}, 0x58) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/keys\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/205, 0xcd}], 0x1, 0x1c4, 0x0) 48.031142999s ago: executing program 8 (id=4957): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4dd, &(0x7f0000000740)="$eJzs3E1sVNUeAPD/nX5DefTxeLwHohbR2GhsoaCwMDEYTVxoYsSFLpt+kEqhhtZECJEhMbg0JO6NS7cu3Ko748rExBUuTQwJMWwAV9fcmTvtdDozTNtpR9rfLxnmnHvPveeeOfecOfccpgHsWMPZP0nEYETcioi9EVGoTTBcfrt/9+rkg7tXJ6OYpmf/TLLD4l4WzyX5++48MlKIKHyaLO+osnD5yvmJubnpS3l8bPHCh2MLl6+8MHth4tz0uemL46dPnzxx/NRL4y+uvVB18svKde/QJ/OHD77x/s23Jrsr2/vz9+pytMtwDNe7lJJn2p1Zh+2pCifdzVK+svkXQ8uy+z+rrp5S+98bXdG08oBtJE3TtK/x7mJa6/qqLcAjK4lOXwHQGZUv+uz5t/KqNxDo3ZzhR8fdOVN+AMrKfT9/RTxZ2liZB+mpeb5tp+GIeK/415fZKzZpHgIAoNr3ZyojwZrx31DEgap0/8rXUIYi4t8RsS8i/hMR+yPiv1FO+7+I+H/N+bsiIm2S/3BNfPX4p3B7YyVsLhv/vZyvbS2P/6J6FWyoK4/tiagMmKeP5Z/JSPT0zczOTR9vkscPr/3yeaN91eO/7JXlXxkL5tdxu7tmgm5qYnFi3QWuced6xKHu2vIn3RHJ0kpAEhEHI+LQGs47VBWefe7rw0uRnpXpHl7+krTuOloblirSryKeLdd/MVbU/3KOSfP1ybH+mJs+NjYz21u6K1b76ecbbzfK/6Hl//b32kNeP/Xd2bxlbVxW/7uq7v+orN8ul38oiUiW1msX1p7Hjd8+a/hMs6r8Pa3d/73Ju6Vw5bn044nFxUvHI3qTN1dvH18+thLP3qNYLv/I0frtf19+TPZJPBYR2U38eEQ8EeUnxOFIrx2JiKci4miT8v/46tMftFz++vf/psnKP1W3/1tR/8vr9Y0CSbGcus6urvNHbj1o0Hm01v+dLIVG8i31+79kRRfR5EpXBDb6+QEAAMCjoBARg1VzSYNRKIyOlueA9seuwtz8wuLzM/MfXZwq/0ZgKHoKM7NzpZmu8nxwT1KZ/xyqio/XxE/k88ZfdA2U4qOT83NTHS05sLvU5pPC6FJfUG7/mT/aM8UM/JP5yQ/sXA9r/wdubtGFAFvO9z/sXFXtv9ggSdH/lIHtqZXvf3OBsD3Va//X1nEM8GhJtWXY0dbS/vUVsL10xztL4UJHrwTYar7TYUdq6Ufy6w6kffV39cfqxNHf/IRdsb7LGKiTV0cC2chqc7P49X65Umt2DaznhJW/ptAwTRRaOc/AUpH7oj11OrPxD+rcgbbf/Gm+PtbuOv1mS9ppvUDzfmN8cJM6JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDb7OwAA//++9tiz") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(0x0, 0x4827e, 0x195) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x2, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 47.209814086s ago: executing program 8 (id=4960): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00082f00fc"], 0x0) 46.065331375s ago: executing program 8 (id=4969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x131}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 44.3308624s ago: executing program 44 (id=4969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x131}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 27.605333275s ago: executing program 4 (id=5051): r0 = socket$netlink(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2c, 0x2}, &(0x7f0000000300)) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) unshare(0x6a040000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) socket(0x8, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r4, &(0x7f0000000400), 0x0) ioctl$DVB_DEMUX_DMX_STOP(r2, 0x6f2a) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r5, &(0x7f0000000000)='\r', 0x1}]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000000, 0x204031, r4, 0xec774000) futex_waitv(&(0x7f0000004040), 0x0, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) landlock_restrict_self(r1, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 24.378832472s ago: executing program 4 (id=5064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x60}}, 0x40800) 24.155602841s ago: executing program 4 (id=5065): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x80440, 0x56) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x802, 0x0) write(r2, &(0x7f0000000100)='+p', 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x2043}}}, 0x7) getrlimit(0xc, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001140)=""/1038, 0x40e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) 23.0328608s ago: executing program 0 (id=5069): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x2000000}, 0x20) 22.795354802s ago: executing program 0 (id=5070): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_setup(0x202, &(0x7f0000000200)=0x0) ioctl$I2C_TIMEOUT(r4, 0x702, 0x9) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r4, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r4}]) write$FUSE_DIRENT(r4, 0x0, 0x10) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) dup3(r4, r2, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @private=0xa010101}, 0x324, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)='veth1_vlan\x00', 0x3, 0x8, 0x5}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) 18.256321567s ago: executing program 0 (id=5082): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4dd, &(0x7f0000000740)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x2, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 17.724923576s ago: executing program 0 (id=5083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x84, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x9, 0x5f, 0x4, 0x9, 0x40, 0x7, 0x80, 0x0, [{0xfffffff0, 0xfffffffc, 0x2c1, 0x9}, {0x55cf, 0x7fff, 0xf1c9228d, 0x1}, {0xe, 0x1, 0x2, 0x1}, {0x100, 0xfffffffa, 0x6, 0x3}]}}]}}]}, 0x84}}, 0x0) 16.952475802s ago: executing program 4 (id=5085): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8, 0x0, 0x1800000000000, 0x7ffffffd, 0xffffffffffffffff, 0xfa11, 0xffffffff}, 0x0) 16.754866739s ago: executing program 0 (id=5087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x27}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0d4}, 0x40) 15.891850268s ago: executing program 45 (id=5085): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8, 0x0, 0x1800000000000, 0x7ffffffd, 0xffffffffffffffff, 0xfa11, 0xffffffff}, 0x0) 15.852427518s ago: executing program 46 (id=5087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x27}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0d4}, 0x40) 6.221507385s ago: executing program 5 (id=5113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a14000000020a03000000000000000000"], 0x60}}, 0x40800) 5.864706769s ago: executing program 5 (id=5115): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x894}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='2', 0x49) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)=ANY=[], 0x0) 3.716386472s ago: executing program 2 (id=5120): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) 3.09817676s ago: executing program 2 (id=5121): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) 2.645939311s ago: executing program 5 (id=5123): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800e2"], &(0x7f0000001b00)=""/3, 0x3b, 0x3, 0x1, 0x7}, 0x28) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x5]}, 0x8, 0x800) 2.38295821s ago: executing program 6 (id=5125): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008847000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 2.342439712s ago: executing program 5 (id=5126): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x120, 0x0, 0x148, 0x0, 0x148, 0x310, 0x240, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e1c, 0x4e20, 0x8, 0x2, 0x101, 0x100, 0xa22}}}, {{@ip={@multicast1, @multicast1=0xe000003f, 0xff000000, 0xff, 'hsr0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x60}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x7, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@dscp={{0x28}, {0x81, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x6768, 0xe, [0x5, 0x31, 0x23, 0x33, 0x12, 0x26, 0x8, 0x32, 0x12, 0x1c, 0x27, 0x31, 0x8, 0x3e, 0x31, 0x17], 0x1, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 2.136890845s ago: executing program 6 (id=5128): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000800)="29000000010001", 0x7) 1.683597258s ago: executing program 6 (id=5129): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb0b0b0b0}) r1 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x40) read$hidraw(r1, &(0x7f00000008c0)=""/257, 0x101) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 1.049043353s ago: executing program 5 (id=5130): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) 944.524712ms ago: executing program 2 (id=5131): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4002014) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 780.749954ms ago: executing program 5 (id=5132): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x894}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='2', 0x49) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)=ANY=[], 0x0) 675.361578ms ago: executing program 2 (id=5133): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c21118557768d1f18bc03d9ba22c25b2a41f702bb044d2b3f6", 0x19}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="7764bafa1d96aa2a2f3eac8c50dd10efca127343620013752723b006ea1d57f05c", 0x21}], 0x1}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 661.002843ms ago: executing program 6 (id=5134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a14000000020a03000000000000000000"], 0x60}}, 0x40800) 381.945858ms ago: executing program 7 (id=4970): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007fe000/0x800000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000b8c000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 316.044396ms ago: executing program 6 (id=5135): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800e2"], &(0x7f0000001b00)=""/3, 0x3b, 0x3, 0x1, 0x7}, 0x28) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x5]}, 0x8, 0x800) 68.56701ms ago: executing program 6 (id=5136): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x14, 0x3, 0x1b1c, 0xc10, 0x0, 0x0, "05010900a101150026ff007508951009008102c0"}}, 0x12c) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0xa, '\x00'/10}}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0xc, '\x00'/12}}, 0x12) nanosleep(0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}}, 0xe) 0s ago: executing program 2 (id=5137): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r2, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x44}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r4, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="c0f162cb25", 0x5}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0xc, 0x84, 0x6}], 0xc}}], 0x2, 0xc88c5) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000300)={0x14}, 0x14) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r7, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ppoll(&(0x7f0000000140)=[{r8, 0x2082}], 0x1, &(0x7f0000000240), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=""/2}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="e80200002900000004000000005a000000000000c2040000000000dfaac7f65dde66007550d861b7b537fd49b44ed35b0b7c2ed243f39735881ba7309715165c3b9edec92e7dadb7a5bbdd45a5fd4320d89ed45cf375461e38967ad0f0891dc4bbba54a2c4b99498353dcc9f0233d55a6e0fbf78c3ba4e983f48b6f65060c96fd75c4a82e937f62c958445a04c99c7646db75133bf141405b7db695b0de9a482a9dc8dc3a25f15db0153211c3604213a2baf4222bf165fdfa2ca3fddc94be49ac220c6fec65b5f419d364efc16072c068df6df4ff736f92d14e2d5c87eb699c31f1755ba93bf935b06fb93bdb863bb796b4fa365b5b80e7eacb78b04010007180000000004000000000000000000000000000000000000000774000000000a007e00000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000c38ad8d6caa2e56f8765bfd0a7e777fb59a5d60885ba7a6790c6688fc7f67bbaf214c9fe428a3210cfe85fb752819b5e77e87ea07a2c43941a0d36bb6b8db0807f"], 0x2e8}}], 0x2, 0x0) kernel console output (not intermixed with test programs): removed [ 1384.474824][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1384.958310][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1385.586055][T11763] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1385.684429][T22197] loop7: detected capacity change from 0 to 1024 [ 1385.736684][T11763] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1385.738124][T11763] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1385.738169][T11763] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1385.741520][T11763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.741567][T11763] usb 7-1: Product: syz [ 1385.741595][T11763] usb 7-1: Manufacturer: syz [ 1385.741624][T11763] usb 7-1: SerialNumber: syz [ 1385.845386][T22197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.845509][T22197] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1386.030892][T11763] usb 7-1: Limiting number of CPorts to U8_MAX [ 1386.198632][ T3252] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 1) [ 1386.199370][ T3252] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1386.199416][ T3252] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1386.199416][ T3252] [ 1386.247301][ C0] usb 7-1: short aprc response received [ 1386.258497][T20720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1386.565841][T11763] usb 7-1: failed to set cport flags for port 0 [ 1386.566079][T11763] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 1386.640718][T11763] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1386.665185][T11763] usb 7-1: USB disconnect, device number 15 [ 1386.714302][T21986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.714424][T21986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.714596][T21986] bridge_slave_0: entered allmulticast mode [ 1386.720548][T21986] bridge_slave_0: entered promiscuous mode [ 1386.910168][T21986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.910295][T21986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.910474][T21986] bridge_slave_1: entered allmulticast mode [ 1386.920725][T21986] bridge_slave_1: entered promiscuous mode [ 1387.085374][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1387.107133][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1387.109028][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1387.111506][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1387.126423][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1388.527656][T21986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.590419][T21986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.590533][T21899] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1388.625227][T21899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1388.628000][T21899] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1388.653282][T21899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1388.763184][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4760'. [ 1388.911276][T21899] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1388.936326][T21899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1388.950168][T21986] team0: Port device team_slave_0 added [ 1388.951140][T21899] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1389.009794][T21899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1389.064729][T21986] team0: Port device team_slave_1 added [ 1389.242824][T18905] Bluetooth: hci1: command tx timeout [ 1389.378438][T21986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.378466][T21986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.378514][T21986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.416743][T21986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.416767][T21986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.416815][T21986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.837809][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1389.839750][T22255] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4761'. [ 1390.790204][T21986] hsr_slave_0: entered promiscuous mode [ 1390.793254][T21986] hsr_slave_1: entered promiscuous mode [ 1390.795862][T21986] debugfs: 'hsr0' already exists in 'hsr' [ 1390.795891][T21986] Cannot create hsr debugfs directory [ 1391.311224][T22269] loop6: detected capacity change from 0 to 1024 [ 1391.324463][T18905] Bluetooth: hci1: command tx timeout [ 1391.370324][T22269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1391.370447][T22269] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.564030][T21490] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm kworker/u8:21: lblock 0 mapped to illegal pblock 0 (length 1) [ 1391.565452][T21490] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1391.565498][T21490] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1391.565498][T21490] [ 1391.643037][T18379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1392.246761][T21899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.400802][T21899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.514213][T22296] mmap: syz.8.4770 (22296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1392.545916][ T5730] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1392.693009][ T5730] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1392.694368][ T5730] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1392.694413][ T5730] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1392.697039][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.697078][ T5730] usb 7-1: Product: syz [ 1392.697106][ T5730] usb 7-1: Manufacturer: syz [ 1392.697134][ T5730] usb 7-1: SerialNumber: syz [ 1392.760331][T20439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.760455][T20439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.968024][T20439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.968150][T20439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.037047][ T5730] usb 7-1: Limiting number of CPorts to U8_MAX [ 1393.041045][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4771'. [ 1393.249302][ C1] usb 7-1: short aprc response received [ 1393.403314][T18905] Bluetooth: hci1: command tx timeout [ 1393.566889][ T5730] usb 7-1: failed to set cport flags for port 0 [ 1393.566985][ T5730] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 1393.573129][ T5730] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1393.704461][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1393.796256][ T5809] usb 7-1: USB disconnect, device number 16 [ 1394.153791][T22214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.153970][T22214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.154129][T22214] bridge_slave_0: entered allmulticast mode [ 1394.156405][T22214] bridge_slave_0: entered promiscuous mode [ 1394.237736][T22214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.237855][T22214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.238015][T22214] bridge_slave_1: entered allmulticast mode [ 1394.240130][T22214] bridge_slave_1: entered promiscuous mode [ 1394.387226][T19128] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.499181][T22214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.528831][T22214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.748164][T19128] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.835914][T21986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1394.847426][T21986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1394.848504][T21986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1394.871829][T21986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1394.967887][T21986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1395.001795][T21986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1395.016210][T21986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1395.051605][T21986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1395.078558][T22214] team0: Port device team_slave_0 added [ 1395.091259][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1395.098534][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1395.105104][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1395.115141][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1395.117006][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1395.302292][T19128] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.374873][T22214] team0: Port device team_slave_1 added [ 1395.482556][ T5615] Bluetooth: hci1: command tx timeout [ 1395.578272][T22214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.578297][T22214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.578341][T22214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.776775][T19128] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.844873][T22214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1395.844901][T22214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.844951][T22214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.186148][T22214] hsr_slave_0: entered promiscuous mode [ 1396.188988][T22214] hsr_slave_1: entered promiscuous mode [ 1396.193657][T22214] debugfs: 'hsr0' already exists in 'hsr' [ 1396.193687][T22214] Cannot create hsr debugfs directory [ 1396.227336][T22354] loop6: detected capacity change from 0 to 1024 [ 1396.289581][T22354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1396.289718][T22354] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1396.647212][T18379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1396.994120][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1397.242831][ T5615] Bluetooth: hci3: command tx timeout [ 1397.339708][T21899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.375651][T19128] bridge_slave_1: left allmulticast mode [ 1397.375685][T19128] bridge_slave_1: left promiscuous mode [ 1397.375897][T19128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.395534][T19128] bridge_slave_0: left allmulticast mode [ 1397.395566][T19128] bridge_slave_0: left promiscuous mode [ 1397.395791][T19128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.051148][T22373] syz.7.4782 (22373): drop_caches: 2 [ 1398.176257][T19128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.181682][T19128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.184663][T19128] bond0 (unregistering): Released all slaves [ 1398.469753][T22401] loop7: detected capacity change from 0 to 512 [ 1398.504779][T22401] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1398.525437][T22401] EXT4-fs (loop7): 1 truncate cleaned up [ 1398.539856][T22401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1398.700154][T22214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.325365][ T5615] Bluetooth: hci3: command tx timeout [ 1399.406720][T22214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.601170][T20720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.681329][T22214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.781212][T22427] loop6: detected capacity change from 0 to 1024 [ 1399.881657][T22427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1399.881795][T22427] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.955719][ T31] audit: type=1804 audit(1791244269.400:924): pid=22427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4788" name="/newroot/169/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 1399.996405][T21986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.135156][T18379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1400.231166][T22214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.296865][T22443] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1400.296912][T22443] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1400.296940][T22443] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1400.552719][T22443] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1400.552760][T22443] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1400.552784][T22443] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1400.667673][T19128] hsr_slave_0: left promiscuous mode [ 1400.678058][T19128] hsr_slave_1: left promiscuous mode [ 1400.679184][T19128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1400.679216][T19128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1400.681313][T19128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.681342][T19128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.731383][T19128] veth1_macvtap: left promiscuous mode [ 1400.731437][T19128] veth0_macvtap: left promiscuous mode [ 1400.731570][T19128] veth1_vlan: left promiscuous mode [ 1400.731661][T19128] veth0_vlan: left promiscuous mode [ 1400.852588][T22443] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1400.852630][T22443] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1400.852658][T22443] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1401.402091][ T5615] Bluetooth: hci3: command tx timeout [ 1401.760199][T19128] team0 (unregistering): Port device team_slave_1 removed [ 1401.797388][T19128] team0 (unregistering): Port device team_slave_0 removed [ 1402.081084][T22477] loop7: detected capacity change from 0 to 512 [ 1402.089575][T22477] EXT4-fs: Ignoring removed i_version option [ 1402.159511][T22477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1402.159613][T22477] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.486486][ T5615] Bluetooth: hci3: command tx timeout [ 1404.427002][T21986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.461438][T21899] veth0_vlan: entered promiscuous mode [ 1404.474069][T21899] veth1_vlan: entered promiscuous mode [ 1404.603980][T18684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.604140][T18684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.636519][T20720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.942720][T22490] loop7: detected capacity change from 0 to 1024 [ 1405.010741][T22490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1405.010880][T22490] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1405.087867][ T31] audit: type=1804 audit(1791244274.530:925): pid=22490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4799" name="/newroot/87/file1/file1" dev="loop7" ino=15 res=1 errno=0 [ 1405.145827][T18684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.145957][T18684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.298038][T20720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1405.383569][T22214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1405.413472][T22214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1405.487794][T22214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1405.505241][T22214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1405.555264][T22214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1405.560289][T22214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1405.585194][T22331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.585317][T22331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.585485][T22331] bridge_slave_0: entered allmulticast mode [ 1405.612767][T22331] bridge_slave_0: entered promiscuous mode [ 1405.631122][T22214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1405.646544][T22214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1405.659580][T22331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.659702][T22331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.659869][T22331] bridge_slave_1: entered allmulticast mode [ 1405.685596][T22331] bridge_slave_1: entered promiscuous mode [ 1405.694605][T21899] veth0_macvtap: entered promiscuous mode [ 1405.701783][T21899] veth1_macvtap: entered promiscuous mode [ 1405.819427][T22331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.839345][T22331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.075749][T18905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1406.093910][T18905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1406.103527][T18905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1406.104684][T18905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1406.105410][T18905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1406.173932][T21899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.185344][T22331] team0: Port device team_slave_0 added [ 1406.275266][T21899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.339265][T22331] team0: Port device team_slave_1 added [ 1406.683479][T21490] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.683700][T21490] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.693159][T22331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.693184][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.693232][T22331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.802794][T22331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.802824][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.802875][T22331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.972166][T18683] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.274622][T22331] hsr_slave_0: entered promiscuous mode [ 1407.279253][T22331] hsr_slave_1: entered promiscuous mode [ 1407.280094][T22331] debugfs: 'hsr0' already exists in 'hsr' [ 1407.280129][T22331] Cannot create hsr debugfs directory [ 1407.332420][T18683] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.673184][T22526] syz.7.4803 (22526): drop_caches: 2 [ 1407.818607][T22214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.820811][T18474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.820842][T18474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.203911][ T5615] Bluetooth: hci2: command tx timeout [ 1408.292214][T18474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.292253][T18474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.408355][T22214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.748112][T22565] No such timeout policy "syz1" [ 1409.841571][T22331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.986847][T18684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.986947][T18684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.111035][T21986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.116347][T19128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.116477][T19128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.283145][ T5615] Bluetooth: hci2: command tx timeout [ 1410.500668][T22586] loop7: detected capacity change from 0 to 1024 [ 1410.555902][T22331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.596998][T22586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1410.597161][T22586] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.718578][ T31] audit: type=1804 audit(1791244280.160:926): pid=22586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4809" name="/newroot/95/file1/file1" dev="loop7" ino=15 res=1 errno=0 [ 1410.967535][T20720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1411.267023][T22331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.856273][T22331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.362523][ T5615] Bluetooth: hci2: command tx timeout [ 1412.717593][T21986] veth0_vlan: entered promiscuous mode [ 1413.094046][T22518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.095537][T22518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.095676][T22518] bridge_slave_0: entered allmulticast mode [ 1413.099875][T22518] bridge_slave_0: entered promiscuous mode [ 1413.141084][T22518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.141206][T22518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.141382][T22518] bridge_slave_1: entered allmulticast mode [ 1413.146409][T22518] bridge_slave_1: entered promiscuous mode [ 1413.490747][T21986] veth1_vlan: entered promiscuous mode [ 1413.553762][T22518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.610991][T22518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.003483][T22518] team0: Port device team_slave_0 added [ 1414.019279][T22518] team0: Port device team_slave_1 added [ 1414.297108][T22518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.297138][T22518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.297186][T22518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1414.442597][ T5615] Bluetooth: hci2: command tx timeout [ 1414.602224][T22518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.602253][T22518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.602303][T22518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.836505][T21986] veth0_macvtap: entered promiscuous mode [ 1414.864600][T22331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1414.907423][T22331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1414.963220][T22331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1415.002259][T22331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1415.009973][T22331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1415.057299][T22331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1415.058283][T21986] veth1_macvtap: entered promiscuous mode [ 1415.123550][T22331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1415.150627][T22331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1415.187696][T22518] hsr_slave_0: entered promiscuous mode [ 1415.196269][T22518] hsr_slave_1: entered promiscuous mode [ 1415.203502][T22518] debugfs: 'hsr0' already exists in 'hsr' [ 1415.203557][T22518] Cannot create hsr debugfs directory [ 1415.247405][T22648] loop9: detected capacity change from 0 to 256 [ 1415.770788][T21986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.072769][T21986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.287195][T19128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.322657][T19128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.322747][T19128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.322811][T19128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.678477][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.917815][T22214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.125643][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.714928][T18905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1417.720366][T18905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1417.742520][T18905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1417.755782][T18905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1417.756557][T18905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1417.797626][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.594731][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.655592][T19128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.655626][T19128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.346621][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.346655][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.784436][T22214] veth0_vlan: entered promiscuous mode [ 1419.803042][ T5615] Bluetooth: hci4: command tx timeout [ 1419.827971][T22214] veth1_vlan: entered promiscuous mode [ 1419.904289][T22331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.022678][ T12] bridge_slave_1: left allmulticast mode [ 1420.023128][ T12] bridge_slave_1: left promiscuous mode [ 1420.023389][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.027925][ T12] bridge_slave_0: left allmulticast mode [ 1420.027956][ T12] bridge_slave_0: left promiscuous mode [ 1420.033194][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.601425][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.637167][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.641572][ T12] bond0 (unregistering): Released all slaves [ 1420.912530][T22331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.084377][T22518] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1421.107874][T22518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1421.148269][T22518] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1421.161647][T22518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1421.177130][T19128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.177240][T19128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.286808][T22518] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1421.307524][T22518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1421.310187][T22518] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1421.339941][T22518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1421.441609][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.441734][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.524919][ T12] hsr_slave_0: left promiscuous mode [ 1421.525860][ T12] hsr_slave_1: left promiscuous mode [ 1421.528463][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.528493][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.529607][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.529637][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.588675][ T12] veth1_macvtap: left promiscuous mode [ 1421.588731][ T12] veth0_macvtap: left promiscuous mode [ 1421.588858][ T12] veth1_vlan: left promiscuous mode [ 1421.588948][ T12] veth0_vlan: left promiscuous mode [ 1421.853894][T18905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1421.871296][T18905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1421.879595][T18905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1421.880671][T18905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1421.882513][T18905] Bluetooth: hci4: command tx timeout [ 1421.902407][T18905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1422.006357][T22749] loop9: detected capacity change from 0 to 1024 [ 1422.086065][T22749] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.086194][T22749] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1422.121793][ T31] audit: type=1800 audit(1791244291.560:927): pid=22749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4830" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1422.223450][T21899] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1422.452268][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.533317][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1422.564106][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1422.830226][T22214] veth0_macvtap: entered promiscuous mode [ 1422.938437][T22214] veth1_macvtap: entered promiscuous mode [ 1423.484376][T22214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.503171][T22214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.645625][ T38] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.645699][ T38] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.645766][ T38] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.645832][ T38] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.972671][ T5615] Bluetooth: hci4: command tx timeout [ 1424.031756][T22518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.043203][ T5615] Bluetooth: hci0: command tx timeout [ 1424.242155][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.551081][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.571010][T22680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.571200][T22680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.571320][T22680] bridge_slave_0: entered allmulticast mode [ 1424.593456][T22680] bridge_slave_0: entered promiscuous mode [ 1424.636851][T21490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.636885][T21490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.668939][T22680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.669086][T22680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.669205][T22680] bridge_slave_1: entered allmulticast mode [ 1424.670849][T22680] bridge_slave_1: entered promiscuous mode [ 1424.727187][T22518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.857803][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.980538][T22680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.239829][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.288071][T22680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.379904][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.380033][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.453362][T22680] team0: Port device team_slave_0 added [ 1425.456697][T22680] team0: Port device team_slave_1 added [ 1425.489392][ T3252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.489424][ T3252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.573544][T21490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.573668][T21490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.612522][T22680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.612556][T22680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.612604][T22680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.615142][T22680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.615165][T22680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.615212][T22680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.943244][T22680] hsr_slave_0: entered promiscuous mode [ 1425.947672][T22680] hsr_slave_1: entered promiscuous mode [ 1425.951649][T22680] debugfs: 'hsr0' already exists in 'hsr' [ 1425.951678][T22680] Cannot create hsr debugfs directory [ 1425.983686][T22331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.042786][ T5615] Bluetooth: hci4: command tx timeout [ 1426.110137][T18905] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1426.125722][T18905] Bluetooth: hci0: command tx timeout [ 1426.138113][T18905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1426.146095][T18905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1426.155650][T18905] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1426.169044][T18905] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1426.442925][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1426.535390][ T12] bridge_slave_1: left allmulticast mode [ 1426.535430][ T12] bridge_slave_1: left promiscuous mode [ 1426.535686][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.565259][ T12] bridge_slave_0: left allmulticast mode [ 1426.565294][ T12] bridge_slave_0: left promiscuous mode [ 1426.565533][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.613990][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4840'. [ 1426.919723][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1426.934421][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.936081][ T12] bond0 (unregistering): Released all slaves [ 1426.971144][T22838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.058515][T22838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.940763][ T12] hsr_slave_0: left promiscuous mode [ 1427.953282][ T12] hsr_slave_1: left promiscuous mode [ 1427.954349][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.954381][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.989273][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.989308][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.037257][ T12] veth1_macvtap: left promiscuous mode [ 1428.037316][ T12] veth0_macvtap: left promiscuous mode [ 1428.037442][ T12] veth1_vlan: left promiscuous mode [ 1428.037533][ T12] veth0_vlan: left promiscuous mode [ 1428.204365][ T5615] Bluetooth: hci0: command tx timeout [ 1428.282419][ T5615] Bluetooth: hci5: command tx timeout [ 1428.657730][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1428.696315][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1429.078154][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1429.317615][T22744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.317735][T22744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.317890][T22744] bridge_slave_0: entered allmulticast mode [ 1429.319880][T22744] bridge_slave_0: entered promiscuous mode [ 1429.345553][T22744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.345687][T22744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.345845][T22744] bridge_slave_1: entered allmulticast mode [ 1429.348063][T22744] bridge_slave_1: entered promiscuous mode [ 1429.471225][T22680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.472947][ T5730] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1429.610401][T22331] veth0_vlan: entered promiscuous mode [ 1429.655084][ T5730] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1429.659465][ T5730] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1429.659498][ T5730] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1429.663284][T22744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.673064][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.673103][ T5730] usb 3-1: Product: syz [ 1429.673130][ T5730] usb 3-1: Manufacturer: syz [ 1429.673158][ T5730] usb 3-1: SerialNumber: syz [ 1429.757227][T22744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.863523][T22680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.894010][ T5730] usb 3-1: Limiting number of CPorts to U8_MAX [ 1429.911074][T22331] veth1_vlan: entered promiscuous mode [ 1429.924695][T22744] team0: Port device team_slave_0 added [ 1429.970782][T22744] team0: Port device team_slave_1 added [ 1430.100399][ C1] usb 3-1: short aprc response received [ 1430.179726][T22680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.236936][T22744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.236996][T22744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.237044][T22744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.291455][ T5615] Bluetooth: hci0: command tx timeout [ 1430.362673][ T5615] Bluetooth: hci5: command tx timeout [ 1430.397212][T22744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.397240][T22744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.397290][T22744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.415134][ T5730] usb 3-1: failed to set cport flags for port 0 [ 1430.415226][ T5730] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 1430.419739][ T5730] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1430.554275][T22680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.640511][ T5824] usb 3-1: USB disconnect, device number 123 [ 1430.825155][T22744] hsr_slave_0: entered promiscuous mode [ 1430.826076][T22744] hsr_slave_1: entered promiscuous mode [ 1430.826714][T22744] debugfs: 'hsr0' already exists in 'hsr' [ 1430.826744][T22744] Cannot create hsr debugfs directory [ 1430.839894][T22331] veth0_macvtap: entered promiscuous mode [ 1430.859749][T22331] veth1_macvtap: entered promiscuous mode [ 1430.881834][T22518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1431.095217][T22331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.110284][T22331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.165377][T18683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.165522][T18683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.165669][T18683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.165779][T18683] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.706871][T22825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.707078][T22825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.707259][T22825] bridge_slave_0: entered allmulticast mode [ 1431.709417][T22825] bridge_slave_0: entered promiscuous mode [ 1431.786023][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1431.824576][T22825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.824688][T22825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.824862][T22825] bridge_slave_1: entered allmulticast mode [ 1431.827011][T22825] bridge_slave_1: entered promiscuous mode [ 1431.878462][T22924] loop2: detected capacity change from 0 to 1024 [ 1431.917228][T22924] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 1431.917273][T22924] EXT4-fs (loop2): group descriptors corrupted! [ 1432.012624][T22825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.020974][T22825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.150718][T22825] team0: Port device team_slave_0 added [ 1432.151631][T22680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1432.165586][T22926] xt_policy: output policy not valid in PREROUTING and INPUT [ 1432.173223][T22680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1432.195027][T22825] team0: Port device team_slave_1 added [ 1432.222609][T22680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1432.227237][T22680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1432.228330][T22680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1432.253012][T22680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1432.254083][T22680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1432.255281][T21490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.255310][T21490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.258973][T22680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1432.384270][T22744] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.442436][ T5615] Bluetooth: hci5: command tx timeout [ 1432.478880][T22825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.479812][T22825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.479855][T22825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.579557][T22825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.579593][T22825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.579645][T22825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.681397][T22744] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.796493][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.796526][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.981404][T22744] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.169306][T22825] hsr_slave_0: entered promiscuous mode [ 1433.175897][T22825] hsr_slave_1: entered promiscuous mode [ 1433.180893][T22825] debugfs: 'hsr0' already exists in 'hsr' [ 1433.180939][T22825] Cannot create hsr debugfs directory [ 1433.395142][T22744] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.464033][T22518] veth0_vlan: entered promiscuous mode [ 1433.719113][T22518] veth1_vlan: entered promiscuous mode [ 1434.354610][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1434.583840][T22973] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1434.592581][ T5615] Bluetooth: hci5: command tx timeout [ 1435.282824][T22986] FAULT_INJECTION: forcing a failure. [ 1435.282824][T22986] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1435.282884][T22986] CPU: 0 UID: 0 PID: 22986 Comm: syz.4.4856 Tainted: G L syzkaller #0 PREEMPT(full) [ 1435.282940][T22986] Tainted: [L]=SOFTLOCKUP [ 1435.282955][T22986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1435.282980][T22986] Call Trace: [ 1435.282994][T22986] [ 1435.283010][T22986] dump_stack_lvl+0x100/0x190 [ 1435.283072][T22986] should_fail_ex.cold+0x5/0xa [ 1435.283132][T22986] get_futex_key+0x1d0/0x14f0 [ 1435.283190][T22986] ? __pfx_get_futex_key+0x10/0x10 [ 1435.283242][T22986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1435.283290][T22986] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1435.283345][T22986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1435.283393][T22986] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1435.283456][T22986] futex_wait_setup+0x91/0x540 [ 1435.283536][T22986] __futex_wait+0x19f/0x300 [ 1435.283606][T22986] ? __pfx___futex_wait+0x10/0x10 [ 1435.283668][T22986] ? __pfx_try_to_wake_up+0x10/0x10 [ 1435.283713][T22986] ? futex_hash+0x311/0x400 [ 1435.283767][T22986] ? __pfx_futex_wake_mark+0x10/0x10 [ 1435.283839][T22986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1435.283892][T22986] ? find_held_lock+0x2b/0x80 [ 1435.283947][T22986] ? futex_wake+0x4ea/0x5e0 [ 1435.284009][T22986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1435.284060][T22986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1435.284122][T22986] futex_wait+0xe6/0x370 [ 1435.284187][T22986] ? __pfx_futex_wait+0x10/0x10 [ 1435.284262][T22986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1435.284309][T22986] ? rcu_read_lock_any_held+0x6a/0x90 [ 1435.284371][T22986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1435.284418][T22986] ? find_held_lock+0x2b/0x80 [ 1435.284474][T22986] ? ksys_write+0x190/0x250 [ 1435.284535][T22986] ? ksys_write+0x190/0x250 [ 1435.284601][T22986] do_futex+0x265/0x440 [ 1435.284658][T22986] ? __pfx_do_futex+0x10/0x10 [ 1435.284715][T22986] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1435.284780][T22986] __x64_sys_futex+0x34f/0x4d0 [ 1435.284837][T22986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1435.284885][T22986] ? fput+0x7c/0x100 [ 1435.284928][T22986] ? __pfx___x64_sys_futex+0x10/0x10 [ 1435.284982][T22986] ? ksys_write+0x1ac/0x250 [ 1435.285042][T22986] ? __pfx_ksys_write+0x10/0x10 [ 1435.285113][T22986] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1435.285168][T22986] do_syscall_64+0x123/0x790 [ 1435.285223][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.285261][T22986] RIP: 0033:0x7fe1bfb9e199 [ 1435.285289][T22986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.285327][T22986] RSP: 002b:00007fe1bddf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1435.285365][T22986] RAX: ffffffffffffffda RBX: 00007fe1bfe25fa8 RCX: 00007fe1bfb9e199 [ 1435.285393][T22986] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe1bfe25fa8 [ 1435.285418][T22986] RBP: 00007fe1bfe25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1435.285444][T22986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1435.285469][T22986] R13: 00007fe1bfe26038 R14: 00007ffdd98f8d90 R15: 00007ffdd98f8e78 [ 1435.285521][T22986] [ 1435.291178][T22744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1435.303632][T22744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1435.315985][T22518] veth0_macvtap: entered promiscuous mode [ 1435.348305][T22744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1435.510738][T22744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1435.511860][T22744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1435.551314][T22744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1435.607415][T22518] veth1_macvtap: entered promiscuous mode [ 1435.633267][T22744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1435.696740][T22744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1435.833012][ T5598] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1435.893494][T22680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.964039][ T5598] usb 5-1: device descriptor read/64, error -71 [ 1436.134495][T22518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.191006][T22518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.212438][ T5598] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1436.342540][ T5598] usb 5-1: device descriptor read/64, error -71 [ 1436.347161][T22680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.425295][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.425416][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.453428][ T5598] usb usb5-port1: attempt power cycle [ 1436.675832][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.675962][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.812120][ T5598] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1436.835070][ T157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.836114][ T157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.836208][ T157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.836270][ T157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.894303][ T5598] usb 5-1: device descriptor read/8, error -71 [ 1437.134921][ T5598] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1437.153695][ T5598] usb 5-1: device descriptor read/8, error -71 [ 1437.265143][ T5598] usb usb5-port1: unable to enumerate USB device [ 1437.274499][T11479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.274529][T11479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.311262][T22744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1437.547748][T22825] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1437.574216][T22825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1437.580697][T18376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.580728][T18376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.607066][T22744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1437.624391][T22825] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1437.666681][T22825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1437.706539][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.706686][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1437.717381][T22825] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1437.749018][T22825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1437.751891][T22825] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1437.798708][T22825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1437.899442][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.899572][T11479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.525586][T22825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.617195][T22825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.634021][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.634148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.741127][ T768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.741256][ T768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.098354][T23071] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1439.815053][T22680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.097378][T22680] veth0_vlan: entered promiscuous mode [ 1440.141448][T22680] veth1_vlan: entered promiscuous mode [ 1440.399059][T22680] veth0_macvtap: entered promiscuous mode [ 1440.437440][T22680] veth1_macvtap: entered promiscuous mode [ 1440.617563][T22680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.668296][T22680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.746777][T23106] loop4: detected capacity change from 0 to 1024 [ 1440.765146][T15825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.768549][T15825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.769501][T23106] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1440.769612][T23106] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1440.862563][T15825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.881495][T15825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.892132][T11763] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1442.028315][T11763] usb 3-1: device descriptor read/64, error -71 [ 1442.272054][T11763] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1442.279549][T23106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1442.402230][T11763] usb 3-1: device descriptor read/64, error -71 [ 1442.456894][T23106] EXT4-fs error (device loop4): ext4_iget_extra_inode:5209: inode #15: comm syz.4.4871: corrupted in-inode xattr: bad e_name length [ 1442.470596][T23106] EXT4-fs (loop4): Remounting filesystem read-only [ 1442.512637][T11763] usb usb3-port1: attempt power cycle [ 1442.565550][T22744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1442.708831][T22331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.739176][T19915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.739210][T19915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.875004][T11763] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1442.941402][T11763] usb 3-1: device descriptor read/8, error -71 [ 1443.016898][T22825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.047733][T19915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.047765][T19915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.173059][T11763] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1443.179670][T23141] loop4: detected capacity change from 0 to 1024 [ 1443.200150][T11763] usb 3-1: device descriptor read/8, error -71 [ 1443.211046][T23141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1443.295104][T23141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1443.315242][T11763] usb usb3-port1: unable to enumerate USB device [ 1443.423323][T22744] veth0_vlan: entered promiscuous mode [ 1443.484492][T22744] veth1_vlan: entered promiscuous mode [ 1443.509686][T22331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.707498][T22744] veth0_macvtap: entered promiscuous mode [ 1443.839758][T22744] veth1_macvtap: entered promiscuous mode [ 1444.017921][T22744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.075368][T22744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.303230][T19911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.304355][T19915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.372724][T19915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.383253][T19915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.758391][T19913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.758428][T19913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.822614][T23169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4883'. [ 1445.763858][T19994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.763895][T19994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.011870][T22825] veth0_vlan: entered promiscuous mode [ 1446.051659][T22825] veth1_vlan: entered promiscuous mode [ 1446.093501][T23188] loop4: detected capacity change from 0 to 1024 [ 1446.148250][T23188] EXT4-fs: Ignoring removed bh option [ 1446.172721][T23188] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1446.208466][T23186] ip_tables: iptables: counters copy to user failed while replacing table [ 1446.238445][T23186] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 1446.254245][T23188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1446.299773][T22825] veth0_macvtap: entered promiscuous mode [ 1446.321865][T23188] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1446.353377][T23191] FAULT_INJECTION: forcing a failure. [ 1446.353377][T23191] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.353439][T23191] CPU: 1 UID: 0 PID: 23191 Comm: syz.2.4888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1446.353492][T23191] Tainted: [L]=SOFTLOCKUP [ 1446.353508][T23191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1446.353532][T23191] Call Trace: [ 1446.353546][T23191] [ 1446.353569][T23191] dump_stack_lvl+0x100/0x190 [ 1446.353632][T23191] should_fail_ex.cold+0x5/0xa [ 1446.353678][T23191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.353734][T23191] should_failslab+0xc2/0x120 [ 1446.353786][T23191] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1446.353853][T23191] ? anon_vma_clone+0x2b3/0xca0 [ 1446.353910][T23191] anon_vma_clone+0x2b3/0xca0 [ 1446.353970][T23191] __split_vma+0x750/0x1de0 [ 1446.354034][T23191] ? __pfx___split_vma+0x10/0x10 [ 1446.354085][T23191] ? mas_next_slot+0xc05/0x13a0 [ 1446.354169][T23191] vms_gather_munmap_vmas+0x3a5/0x1720 [ 1446.354238][T23191] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1446.354296][T23191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.354345][T23191] ? lock_acquire+0x1d1/0x380 [ 1446.354387][T23191] ? futex_unqueue+0x29/0x2c0 [ 1446.354439][T23191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.354488][T23191] ? find_held_lock+0x2b/0x80 [ 1446.354544][T23191] ? futex_unqueue+0x133/0x2c0 [ 1446.354602][T23191] ? futex_unqueue+0x133/0x2c0 [ 1446.354650][T23191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.354712][T23191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.354760][T23191] ? futex_unqueue+0x13d/0x2c0 [ 1446.354812][T23191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.354868][T23191] do_vmi_align_munmap+0x287/0x5f0 [ 1446.354933][T23191] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1446.354992][T23191] ? __pfx_futex_wake_mark+0x10/0x10 [ 1446.355067][T23191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.355115][T23191] ? __lock_acquire+0x5c0/0x1f40 [ 1446.355194][T23191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.355242][T23191] ? mas_walk+0x260/0x310 [ 1446.355299][T23191] do_vmi_munmap+0x1f8/0x3e0 [ 1446.355362][T23191] __vm_munmap+0x196/0x390 [ 1446.355426][T23191] ? __pfx___vm_munmap+0x10/0x10 [ 1446.355489][T23191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.355573][T23191] __x64_sys_munmap+0x59/0x80 [ 1446.355618][T23191] do_syscall_64+0x123/0x790 [ 1446.355676][T23191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.355718][T23191] RIP: 0033:0x7f0b94f9e199 [ 1446.355750][T23191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.355788][T23191] RSP: 002b:00007f0b95eea028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 1446.355826][T23191] RAX: ffffffffffffffda RBX: 00007f0b95225fa0 RCX: 00007f0b94f9e199 [ 1446.355853][T23191] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000001000 [ 1446.355879][T23191] RBP: 00007f0b950350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1446.355904][T23191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1446.355926][T23191] R13: 00007f0b95226038 R14: 00007f0b95225fa0 R15: 00007ffe65242738 [ 1446.355978][T23191] [ 1446.364985][T22825] veth1_macvtap: entered promiscuous mode [ 1446.529733][T22825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.618444][T22825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.733176][T17973] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.734249][T17973] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.734313][T17973] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.734374][T17973] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.173540][ T5824] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1447.310200][T18474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.310234][T18474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.326337][ T5824] usb 6-1: device descriptor read/64, error -71 [ 1447.376620][T22331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.543197][T18376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.543232][T18376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.597458][ T5824] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1447.732184][ T5824] usb 6-1: device descriptor read/64, error -71 [ 1447.842751][ T5824] usb usb6-port1: attempt power cycle [ 1448.227213][ T5824] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1448.377279][ T5824] usb 6-1: device descriptor read/8, error -71 [ 1448.652252][ T5824] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1448.678007][ T5824] usb 6-1: device descriptor read/8, error -71 [ 1448.784160][ T5824] usb usb6-port1: unable to enumerate USB device [ 1449.109290][T23238] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1449.237834][T23245] loop0: detected capacity change from 0 to 512 [ 1449.409560][T23254] random: crng reseeded on system resumption [ 1449.490389][T23245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1449.490514][T23245] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1450.705222][T22744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.212368][T23292] loop1: detected capacity change from 0 to 512 [ 1452.296924][T23292] EXT4-fs error (device loop1): ext4_validate_block_bitmap:435: comm syz.1.4912: bg 0: block 5: invalid block bitmap [ 1452.296984][T23292] loop1: lost filesystem error report for type 5 error -117 [ 1452.305690][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1452.305724][ C0] EXT4-fs (loop1): initial error at time 1791244321: ext4_validate_block_bitmap:435 [ 1452.305767][ C0] EXT4-fs (loop1): last error at time 1791244321: ext4_validate_block_bitmap:435 [ 1452.393485][T23292] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1452.394159][T23292] loop1: lost filesystem error report for type 5 error -117 [ 1452.397012][T23292] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.4912: invalid indirect mapped block 3 (level 2) [ 1452.397069][T23292] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1452.400194][T23292] EXT4-fs (loop1): 1 orphan inode deleted [ 1452.400227][T23292] EXT4-fs (loop1): 1 truncate cleaned up [ 1452.501510][T23292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1452.575167][T23300] FAULT_INJECTION: forcing a failure. [ 1452.575167][T23300] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.575225][T23300] CPU: 1 UID: 0 PID: 23300 Comm: syz.5.4914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1452.575282][T23300] Tainted: [L]=SOFTLOCKUP [ 1452.575297][T23300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1452.575321][T23300] Call Trace: [ 1452.575335][T23300] [ 1452.575350][T23300] dump_stack_lvl+0x100/0x190 [ 1452.575412][T23300] should_fail_ex.cold+0x5/0xa [ 1452.575458][T23300] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.575514][T23300] should_failslab+0xc2/0x120 [ 1452.575562][T23300] __kmalloc_noprof+0xfc/0x840 [ 1452.575635][T23300] ? security_inode_init_security+0x113/0x370 [ 1452.575703][T23300] security_inode_init_security+0x113/0x370 [ 1452.575761][T23300] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1452.575830][T23300] ? __pfx_security_inode_init_security+0x10/0x10 [ 1452.575889][T23300] ? do_raw_spin_unlock+0x145/0x1e0 [ 1452.575947][T23300] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.575994][T23300] ? _raw_spin_unlock+0x28/0x50 [ 1452.576046][T23300] shmem_mknod+0x2ce/0x480 [ 1452.576092][T23300] ? __pfx_shmem_mknod+0x10/0x10 [ 1452.576128][T23300] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.576188][T23300] ? __pfx_shmem_create+0x10/0x10 [ 1452.576227][T23300] lookup_open+0x1255/0x1990 [ 1452.576307][T23300] path_openat+0xa2c/0x2440 [ 1452.576359][T23300] ? __pfx_path_openat+0x10/0x10 [ 1452.576418][T23300] do_file_open+0x20e/0x430 [ 1452.576468][T23300] ? __pfx_do_file_open+0x10/0x10 [ 1452.576547][T23300] ? _raw_spin_unlock+0x28/0x50 [ 1452.576595][T23300] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.576642][T23300] ? alloc_fd+0x471/0x7a0 [ 1452.576702][T23300] do_sys_openat2+0x10f/0x1e0 [ 1452.576753][T23300] ? __pfx_do_sys_openat2+0x10/0x10 [ 1452.576822][T23300] __x64_sys_openat+0x12d/0x210 [ 1452.576874][T23300] ? __pfx___x64_sys_openat+0x10/0x10 [ 1452.576935][T23300] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.576991][T23300] do_syscall_64+0x123/0x790 [ 1452.577047][T23300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.577089][T23300] RIP: 0033:0x7f8fb739e199 [ 1452.577121][T23300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.577159][T23300] RSP: 002b:00007f8fb55f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1452.577197][T23300] RAX: ffffffffffffffda RBX: 00007f8fb7625fa0 RCX: 00007f8fb739e199 [ 1452.577225][T23300] RDX: 0000000000000140 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1452.577251][T23300] RBP: 00007f8fb74350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1452.577276][T23300] R10: 00000000000001a0 R11: 0000000000000246 R12: 0000000000000000 [ 1452.577302][T23300] R13: 00007f8fb7626038 R14: 00007f8fb7625fa0 R15: 00007ffc292dfe58 [ 1452.577355][T23300] [ 1453.006601][T22680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.824438][T11763] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 1454.851229][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1454.858660][T23348] netlink: 'syz.5.4933': attribute type 1 has an invalid length. [ 1454.858910][T23348] netlink: 'syz.5.4933': attribute type 1 has an invalid length. [ 1454.885839][T11763] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1455.116688][T23350] loop1: detected capacity change from 0 to 512 [ 1455.169782][T23351] fido_id[23351]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1455.208956][T23350] EXT4-fs error (device loop1): ext4_validate_block_bitmap:435: comm syz.1.4935: bg 0: block 5: invalid block bitmap [ 1455.209013][T23350] loop1: lost filesystem error report for type 5 error -117 [ 1455.211989][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1455.212023][ C0] EXT4-fs (loop1): initial error at time 1791244324: ext4_validate_block_bitmap:435 [ 1455.212064][ C0] EXT4-fs (loop1): last error at time 1791244324: ext4_validate_block_bitmap:435 [ 1455.216792][T23350] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1455.216829][T23350] loop1: lost filesystem error report for type 5 error -117 [ 1455.217315][T23350] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.4935: invalid indirect mapped block 3 (level 2) [ 1455.217370][T23350] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1455.218830][T23350] EXT4-fs (loop1): 1 orphan inode deleted [ 1455.218863][T23350] EXT4-fs (loop1): 1 truncate cleaned up [ 1455.228045][T23350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1455.406753][ C0] I/O error, dev loop1, sector 26 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 1455.406947][T23363] EXT4-fs error (device loop1): __ext4_find_entry:1615: inode #2: comm syz.1.4935: reading directory lblock 0 [ 1455.407218][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2 [ 1455.407268][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2 [ 1455.407364][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1455.412060][T23363] EXT4-fs (loop1): I/O error while writing superblock [ 1455.506599][T23350] loop1: detected capacity change from 512 to 0 [ 1455.509052][ C0] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1455.765689][T22680] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 1455.791411][T22680] EXT4-fs error (device loop1): ext4_get_inode_loc:5053: inode #2: block 5: comm syz-executor: unable to read itable block [ 1455.796888][T22680] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1455.796922][T22680] EXT4-fs (loop1): I/O error while writing superblock [ 1455.796947][T22680] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: IO failure [ 1455.797026][T22680] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1455.797054][T22680] EXT4-fs (loop1): I/O error while writing superblock [ 1455.797078][T22680] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz-executor: mark_inode_dirty error [ 1455.797247][T22680] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1455.797276][T22680] EXT4-fs (loop1): I/O error while writing superblock [ 1456.111812][T22680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.120634][T22680] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1456.120668][T22680] EXT4-fs (loop1): I/O error while writing superblock [ 1456.691317][T23395] FAULT_INJECTION: forcing a failure. [ 1456.691317][T23395] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.691374][T23395] CPU: 0 UID: 0 PID: 23395 Comm: syz.8.4949 Tainted: G L syzkaller #0 PREEMPT(full) [ 1456.691431][T23395] Tainted: [L]=SOFTLOCKUP [ 1456.691446][T23395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1456.691470][T23395] Call Trace: [ 1456.691484][T23395] [ 1456.691500][T23395] dump_stack_lvl+0x100/0x190 [ 1456.691561][T23395] should_fail_ex.cold+0x5/0xa [ 1456.691606][T23395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1456.691662][T23395] should_failslab+0xc2/0x120 [ 1456.691709][T23395] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1456.691775][T23395] ? __pfx_map_id_range_down+0x10/0x10 [ 1456.691819][T23395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1456.691869][T23395] ? security_inode_alloc+0x3b/0x2c0 [ 1456.691950][T23395] security_inode_alloc+0x3b/0x2c0 [ 1456.692018][T23395] inode_init_always_gfp+0xc6f/0xfb0 [ 1456.692080][T23395] alloc_inode+0x8e/0x250 [ 1456.692142][T23395] new_inode+0x22/0x1c0 [ 1456.692199][T23395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1456.692256][T23395] shmem_get_inode+0x1e3/0xf70 [ 1456.692305][T23395] ? __pfx_shmem_get_inode+0x10/0x10 [ 1456.692348][T23395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1456.692396][T23395] ? do_raw_spin_unlock+0x145/0x1e0 [ 1456.692452][T23395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1456.692501][T23395] ? _raw_spin_unlock+0x28/0x50 [ 1456.692553][T23395] shmem_mknod+0x217/0x480 [ 1456.692601][T23395] ? __pfx_shmem_mknod+0x10/0x10 [ 1456.692640][T23395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1456.692704][T23395] ? __pfx_shmem_create+0x10/0x10 [ 1456.692744][T23395] lookup_open+0x1255/0x1990 [ 1456.692827][T23395] path_openat+0xa2c/0x2440 [ 1456.692880][T23395] ? __pfx_path_openat+0x10/0x10 [ 1456.692941][T23395] do_file_open+0x20e/0x430 [ 1456.692991][T23395] ? __pfx_do_file_open+0x10/0x10 [ 1456.693078][T23395] ? _raw_spin_unlock+0x28/0x50 [ 1456.693121][T23395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1456.693170][T23395] ? alloc_fd+0x471/0x7a0 [ 1456.693231][T23395] do_sys_openat2+0x10f/0x1e0 [ 1456.693284][T23395] ? __pfx_do_sys_openat2+0x10/0x10 [ 1456.693354][T23395] __x64_sys_openat+0x12d/0x210 [ 1456.693409][T23395] ? __pfx___x64_sys_openat+0x10/0x10 [ 1456.693470][T23395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1456.693528][T23395] do_syscall_64+0x123/0x790 [ 1456.693586][T23395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.693628][T23395] RIP: 0033:0x7fcd2ef9e199 [ 1456.693660][T23395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.693699][T23395] RSP: 002b:00007fcd2fe48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1456.693738][T23395] RAX: ffffffffffffffda RBX: 00007fcd2f225fa0 RCX: 00007fcd2ef9e199 [ 1456.693767][T23395] RDX: 0000000000000140 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1456.693795][T23395] RBP: 00007fcd2f0350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1456.693821][T23395] R10: 00000000000001a0 R11: 0000000000000246 R12: 0000000000000000 [ 1456.693846][T23395] R13: 00007fcd2f226038 R14: 00007fcd2f225fa0 R15: 00007ffdfa8d5e18 [ 1456.693900][T23395] [ 1456.957757][T23396] loop2: detected capacity change from 0 to 1024 [ 1457.191502][T23396] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1457.208852][T23396] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1458.052056][T23396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1458.238200][T22214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.545971][T23411] loop5: detected capacity change from 0 to 512 [ 1458.551381][T23411] EXT4-fs: Ignoring removed nobh option [ 1458.581222][T23411] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1458.595831][T23414] loop8: detected capacity change from 0 to 512 [ 1458.629833][T23411] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.4956: attempt to clear invalid blocks 1 len 1 [ 1458.629889][T23411] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1458.631981][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1458.632012][ C0] EXT4-fs (loop5): initial error at time 1791244328: ext4_clear_blocks:874: inode 13 [ 1458.632061][ C0] EXT4-fs (loop5): last error at time 1791244328: ext4_clear_blocks:874: inode 13 [ 1458.663942][T23411] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1458.664129][T23411] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.4956: invalid indirect mapped block 1819239214 (level 0) [ 1458.664181][T23411] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1458.669541][T23411] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.4956: invalid indirect mapped block 1819239214 (level 1) [ 1458.669602][T23411] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1458.686423][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1458.708216][T23414] EXT4-fs error (device loop8): ext4_validate_block_bitmap:435: comm syz.8.4957: bg 0: block 5: invalid block bitmap [ 1458.708267][T23414] loop8: lost filesystem error report for type 5 error -117 [ 1458.713967][T23414] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1458.714002][T23414] loop8: lost filesystem error report for type 5 error -117 [ 1458.715907][T23414] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #11: comm syz.8.4957: invalid indirect mapped block 3 (level 2) [ 1458.715960][T23414] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1458.724702][ C0] EXT4-fs (loop8): error count since last fsck: 3 [ 1458.724734][ C0] EXT4-fs (loop8): initial error at time 1791244328: ext4_validate_block_bitmap:435 [ 1458.724773][ C0] EXT4-fs (loop8): last error at time 1791244328: ext4_free_branches:1020: inode 11 [ 1458.734034][T23414] EXT4-fs (loop8): 1 orphan inode deleted [ 1458.734066][T23414] EXT4-fs (loop8): 1 truncate cleaned up [ 1458.756529][T23414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1458.829996][T23411] EXT4-fs (loop5): 1 truncate cleaned up [ 1458.869368][T23411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1458.996076][T23414] loop8: detected capacity change from 512 to 0 [ 1459.009837][ C0] I/O error, dev loop8, sector 26 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 1459.010264][T23418] EXT4-fs error (device loop8): __ext4_find_entry:1615: inode #2: comm syz.8.4957: reading directory lblock 0 [ 1459.010394][T23418] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 1459.010424][T23418] EXT4-fs (loop8): I/O error while writing superblock [ 1459.217956][T22825] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 1459.218436][T22825] EXT4-fs error (device loop8): ext4_get_inode_loc:5053: inode #2: block 5: comm syz-executor: unable to read itable block [ 1459.218560][T22825] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 1459.218592][T22825] EXT4-fs (loop8): I/O error while writing superblock [ 1459.218618][T22825] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6522: IO failure [ 1459.218696][T22825] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 1459.218725][T22825] EXT4-fs (loop8): I/O error while writing superblock [ 1459.218750][T22825] EXT4-fs error (device loop8): ext4_dirty_inode:6736: inode #2: comm syz-executor: mark_inode_dirty error [ 1459.218836][T22825] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 1459.218863][T22825] EXT4-fs (loop8): I/O error while writing superblock [ 1459.283072][T22518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.591220][T22825] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.611608][T18905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1459.622718][T22825] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 1459.622752][T22825] EXT4-fs (loop8): I/O error while writing superblock [ 1459.637341][T18905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1459.640199][T18905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1459.648576][T18905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1459.649315][T18905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1461.295982][ T5824] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1461.443014][ T5824] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1461.444338][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.455383][ T5824] usb 5-1: config 0 descriptor?? [ 1461.567339][T21491] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.679122][ T5824] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1461.804287][T18905] Bluetooth: hci4: command tx timeout [ 1461.821073][T21491] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.855326][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1462.067187][ T5824] [drm:udl_init] *ERROR* Selecting channel failed [ 1462.087136][T21491] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.140774][ T5824] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1462.140815][ T5824] [drm] Initialized udl on minor 1 [ 1462.147089][ T5824] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1462.157404][ T5824] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1462.159621][ T5737] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1462.160635][ T5737] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1462.160864][ T5737] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1462.265054][ T5824] usb 5-1: USB disconnect, device number 122 [ 1462.657140][T21491] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.756812][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1462.771546][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1462.780095][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1462.783153][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1462.798482][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1463.257794][T23508] loop2: detected capacity change from 0 to 512 [ 1463.263853][T23508] EXT4-fs: Ignoring removed oldalloc option [ 1463.263919][T23508] EXT4-fs: Ignoring removed nobh option [ 1463.289959][T23508] EXT4-fs error (device loop2): ext4_xattr_inode_iget:470: comm syz.2.4978: EA inode 11 has unexpected i_nlink=0 ref_count=7168870745731235840 [ 1463.290037][T23508] loop2: lost filesystem error report for type 5 error -117 [ 1463.291979][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1463.292010][ C1] EXT4-fs (loop2): initial error at time 1791244332: ext4_xattr_inode_iget:470 [ 1463.292049][ C1] EXT4-fs (loop2): last error at time 1791244332: ext4_xattr_inode_iget:470 [ 1463.303712][T23508] EXT4-fs (loop2): 1 orphan inode deleted [ 1463.311134][T23508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.373799][T23508] EXT4-fs error (device loop2): __ext4_iget:5592: inode #14: block 1886221359: comm syz.2.4978: invalid block [ 1463.510651][T23511] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.885016][T18905] Bluetooth: hci4: command tx timeout [ 1463.913163][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1464.497102][T23535] fuse: Bad value for 'fd' [ 1464.832364][T22103] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1464.842439][T18905] Bluetooth: hci5: command tx timeout [ 1464.989417][T21491] bridge_slave_1: left allmulticast mode [ 1464.989456][T21491] bridge_slave_1: left promiscuous mode [ 1464.989717][T21491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.015137][T22103] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1465.017107][T22103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.026140][T21491] bridge_slave_0: left allmulticast mode [ 1465.026173][T21491] bridge_slave_0: left promiscuous mode [ 1465.027603][T21491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.063080][T22103] usb 5-1: config 0 descriptor?? [ 1465.267014][T22103] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1465.518686][T22103] [drm:udl_init] *ERROR* Selecting channel failed [ 1465.602431][T22103] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1465.602471][T22103] [drm] Initialized udl on minor 1 [ 1465.605216][T22103] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1465.606640][T22103] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1465.610239][T11763] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1465.611062][T11763] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1465.611288][T11763] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1465.668853][T22103] usb 5-1: USB disconnect, device number 123 [ 1465.915661][T21491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.919190][T21491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.921827][T21491] bond0 (unregistering): Released all slaves [ 1465.964735][T18905] Bluetooth: hci4: command tx timeout [ 1466.009234][T23427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.009354][T23427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.009517][T23427] bridge_slave_0: entered allmulticast mode [ 1466.020713][T23427] bridge_slave_0: entered promiscuous mode [ 1466.052918][T23427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.055459][T23427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.055639][T23427] bridge_slave_1: entered allmulticast mode [ 1466.086100][T23427] bridge_slave_1: entered promiscuous mode [ 1466.657273][T23427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.689624][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1466.705820][T23427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.878512][T23589] loop5: detected capacity change from 0 to 512 [ 1466.922431][T18905] Bluetooth: hci5: command tx timeout [ 1466.978240][T23589] EXT4-fs error (device loop5): ext4_validate_block_bitmap:435: comm syz.5.4998: bg 0: block 5: invalid block bitmap [ 1466.978293][T23589] loop5: lost filesystem error report for type 5 error -117 [ 1466.979885][T23589] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1466.979922][T23589] loop5: lost filesystem error report for type 5 error -117 [ 1466.980354][T23589] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.4998: invalid indirect mapped block 3 (level 2) [ 1466.980407][T23589] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1466.981982][ C1] EXT4-fs (loop5): error count since last fsck: 3 [ 1466.982015][ C1] EXT4-fs (loop5): initial error at time 1791244336: ext4_validate_block_bitmap:435 [ 1466.982057][ C1] EXT4-fs (loop5): last error at time 1791244336: ext4_free_branches:1020: inode 11 [ 1466.985732][T23589] EXT4-fs (loop5): 1 orphan inode deleted [ 1466.985762][T23589] EXT4-fs (loop5): 1 truncate cleaned up [ 1466.992669][T23589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1467.082351][ T31] audit: type=1804 audit(1791244336.530:928): pid=23589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4998" name="/newroot/29/file0/bus" dev="loop5" ino=11 res=1 errno=0 [ 1467.272700][T23599] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5004'. [ 1467.286881][T23601] loop0: detected capacity change from 0 to 256 [ 1467.328724][T23601] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1467.334724][T22518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.043967][T18905] Bluetooth: hci4: command tx timeout [ 1468.169261][ T31] audit: type=1800 audit(1791244337.610:929): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5002" name="file1" dev="loop0" ino=1049592 res=0 errno=0 [ 1468.467320][T23427] team0: Port device team_slave_0 added [ 1468.497731][T23616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5006'. [ 1468.570951][T21491] hsr_slave_0: left promiscuous mode [ 1468.579229][T21491] hsr_slave_1: left promiscuous mode [ 1468.581334][T21491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1468.581366][T21491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.608000][T21491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1468.608029][T21491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.638826][T21491] veth1_macvtap: left promiscuous mode [ 1468.638877][T21491] veth0_macvtap: left promiscuous mode [ 1468.639004][T21491] veth1_vlan: left promiscuous mode [ 1468.639119][T21491] veth0_vlan: left promiscuous mode [ 1468.762472][ T5598] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1468.913104][ T5598] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1468.914974][ T5598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.952339][T23623] loop5: detected capacity change from 0 to 1024 [ 1468.973629][T23623] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1468.973743][T23623] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1468.978826][ T5598] usb 1-1: config 0 descriptor?? [ 1469.007195][T18905] Bluetooth: hci5: command tx timeout [ 1469.139982][T23623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1469.197105][ T5598] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1469.209384][T23623] EXT4-fs error (device loop5): ext4_iget_extra_inode:5209: inode #15: comm syz.5.5010: corrupted in-inode xattr: bad e_name length [ 1469.210171][T23623] EXT4-fs (loop5): Remounting filesystem read-only [ 1469.284934][T22518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.285170][T21491] team0 (unregistering): Port device team_slave_1 removed [ 1469.321196][T21491] team0 (unregistering): Port device team_slave_0 removed [ 1469.436380][ T5598] [drm:udl_init] *ERROR* Selecting channel failed [ 1469.501336][ T5598] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 1469.501375][ T5598] [drm] Initialized udl on minor 1 [ 1469.503973][ T5598] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1469.504409][ T5598] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1469.507473][T22103] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1469.508203][T22103] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1469.508440][T22103] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1469.516244][ T5598] usb 1-1: USB disconnect, device number 22 [ 1469.708884][T23427] team0: Port device team_slave_1 added [ 1469.911848][T23427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.911877][T23427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.947035][T23427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.976775][T23427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1469.976803][T23427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.976851][T23427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.125175][T23427] hsr_slave_0: entered promiscuous mode [ 1470.126359][T23427] hsr_slave_1: entered promiscuous mode [ 1470.127190][T23427] debugfs: 'hsr0' already exists in 'hsr' [ 1470.127218][T23427] Cannot create hsr debugfs directory [ 1470.308329][T23640] loop0: detected capacity change from 0 to 512 [ 1470.338857][T23640] EXT4-fs error (device loop0): ext4_validate_block_bitmap:435: comm syz.0.5015: bg 0: block 5: invalid block bitmap [ 1470.338909][T23640] loop0: lost filesystem error report for type 5 error -117 [ 1470.341986][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1470.342018][ C0] EXT4-fs (loop0): initial error at time 1791244339: ext4_validate_block_bitmap:435 [ 1470.342058][ C0] EXT4-fs (loop0): last error at time 1791244339: ext4_validate_block_bitmap:435 [ 1470.342117][T23640] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1470.342149][T23640] loop0: lost filesystem error report for type 5 error -117 [ 1470.364955][T23640] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.5015: invalid indirect mapped block 3 (level 2) [ 1470.365012][T23640] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1470.366314][T23640] EXT4-fs (loop0): 1 orphan inode deleted [ 1470.366345][T23640] EXT4-fs (loop0): 1 truncate cleaned up [ 1470.457282][T23640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1470.526298][ T31] audit: type=1804 audit(1791244339.970:930): pid=23640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5015" name="/newroot/29/file0/bus" dev="loop0" ino=11 res=1 errno=0 [ 1470.714044][T22744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.084689][T18905] Bluetooth: hci5: command tx timeout [ 1471.164042][T23650] syzkaller0: entered promiscuous mode [ 1471.164086][T23650] syzkaller0: entered allmulticast mode [ 1471.486487][T23667] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1472.812144][T22103] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1472.992509][T22103] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1473.003294][T22103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.007110][T22103] usb 1-1: config 0 descriptor?? [ 1473.216971][T22103] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1473.489519][T22103] [drm:udl_init] *ERROR* Selecting channel failed [ 1473.514351][T22103] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 1473.514389][T22103] [drm] Initialized udl on minor 1 [ 1473.523725][T22103] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1473.524164][T22103] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1473.527410][T22103] usb 1-1: USB disconnect, device number 23 [ 1473.532021][ T5598] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1473.532643][ T5598] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1474.572598][T23709] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1476.420056][T23727] loop0: detected capacity change from 0 to 512 [ 1476.495340][T23727] EXT4-fs error (device loop0): ext4_validate_block_bitmap:435: comm syz.0.5040: bg 0: block 5: invalid block bitmap [ 1476.495393][T23727] loop0: lost filesystem error report for type 5 error -117 [ 1476.497045][T23727] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1476.497080][T23727] loop0: lost filesystem error report for type 5 error -117 [ 1476.497496][T23727] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.5040: invalid indirect mapped block 3 (level 2) [ 1476.497548][T23727] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1476.498164][T23727] EXT4-fs (loop0): 1 orphan inode deleted [ 1476.498194][T23727] EXT4-fs (loop0): 1 truncate cleaned up [ 1476.506678][T23727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1476.574830][ T31] audit: type=1804 audit(1791244346.010:931): pid=23727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5040" name="/newroot/38/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1476.765335][T22744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.171477][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1477.883483][T23749] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1478.824125][T23427] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.851881][T23489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.856196][T23489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.856408][T23489] bridge_slave_0: entered allmulticast mode [ 1478.867855][T23489] bridge_slave_0: entered promiscuous mode [ 1478.881850][T23489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.885948][T23489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.886136][T23489] bridge_slave_1: entered allmulticast mode [ 1478.919360][T23489] bridge_slave_1: entered promiscuous mode [ 1479.774490][T23427] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.913194][T23489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.984949][T23489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.068873][T23427] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.196943][T23489] team0: Port device team_slave_0 added [ 1480.308731][T23427] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.444906][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1480.628697][T23489] team0: Port device team_slave_1 added [ 1480.799389][T23805] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1481.159776][T23805] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1481.465439][T23489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.465475][T23489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.465528][T23489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.534361][T23489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.534382][T23489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.534419][T23489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.729956][T23427] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1481.745758][T23801] device-mapper: ioctl: device has been removed from the dev hash table. [ 1481.777571][T23427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1481.779624][T23427] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1481.809570][T23427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1482.204389][T23427] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1482.250483][T23427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1482.251509][T23427] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1482.279658][T23427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1482.361042][T23489] hsr_slave_0: entered promiscuous mode [ 1482.365904][T23489] hsr_slave_1: entered promiscuous mode [ 1482.371377][T23489] debugfs: 'hsr0' already exists in 'hsr' [ 1482.371406][T23489] Cannot create hsr debugfs directory [ 1482.803420][T23837] batman_adv: batadv0: Adding interface: syzkaller0 [ 1482.803448][T23837] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.803502][T23837] batman_adv: batadv0: Interface activated: syzkaller0 [ 1483.240753][T23854] Bluetooth: MGMT ver 1.23 [ 1483.381526][T23823] bridge1: entered allmulticast mode [ 1483.537705][T23831] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1483.587483][T23831] batman_adv: batadv0: Removing interface: syzkaller0 [ 1483.719969][ T5275] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1483.885789][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1483.942228][T16031] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1484.105113][T16031] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1484.284216][T16031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.576171][T16031] usb 1-1: config 0 descriptor?? [ 1484.878154][T16031] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1485.134540][T16031] [drm:udl_init] *ERROR* Selecting channel failed [ 1485.180264][T16031] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 1485.180303][T16031] [drm] Initialized udl on minor 1 [ 1485.194627][T16031] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1485.195109][T16031] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1485.201356][T16031] usb 1-1: USB disconnect, device number 24 [ 1486.218484][T23898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5078'. [ 1486.323709][T23822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1486.323746][T23822] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1486.496769][T23427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.517028][T23427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.555639][T18684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.555775][T18684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.560323][T23822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1486.560354][T23822] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1486.585575][T21490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.585741][T21490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.763725][T23822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1486.763760][T23822] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1488.257772][T23936] loop0: detected capacity change from 0 to 512 [ 1488.299501][T23936] EXT4-fs error (device loop0): ext4_validate_block_bitmap:435: comm syz.0.5082: bg 0: block 5: invalid block bitmap [ 1488.299553][T23936] loop0: lost filesystem error report for type 5 error -117 [ 1488.300552][T23936] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1488.300587][T23936] loop0: lost filesystem error report for type 5 error -117 [ 1488.301759][T23936] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.5082: invalid indirect mapped block 3 (level 2) [ 1488.301814][T23936] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1488.314582][ C0] EXT4-fs (loop0): error count since last fsck: 3 [ 1488.314614][ C0] EXT4-fs (loop0): initial error at time 1791244357: ext4_validate_block_bitmap:435 [ 1488.314655][ C0] EXT4-fs (loop0): last error at time 1791244357: ext4_free_branches:1020: inode 11 [ 1488.382770][T23936] EXT4-fs (loop0): 1 orphan inode deleted [ 1488.382804][T23936] EXT4-fs (loop0): 1 truncate cleaned up [ 1488.404098][T23936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1488.707738][T22744] EXT4-fs error (device loop0): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1488.712523][T22744] EXT4-fs error (device loop0): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 1489.004482][T23822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1489.004518][T23822] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1489.119667][T23822] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1489.119702][T23822] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1489.461794][T23489] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1489.477036][T23489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1489.478061][T23489] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1489.497116][T23489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1489.503850][T23489] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1489.545914][T23489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1489.546958][T23489] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1489.587497][T23489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1489.591611][T22744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.897823][T15825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.169996][T15825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.378844][T15825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.590704][T15825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.880998][T23489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.903163][T23983] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1490.903193][T23983] overlayfs: failed to set xattr on upper [ 1490.903207][T23983] overlayfs: ...falling back to redirect_dir=nofollow. [ 1490.903223][T23983] overlayfs: ...falling back to index=off. [ 1490.903237][T23983] overlayfs: ...falling back to uuid=null. [ 1491.027362][T18905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1491.043591][T18905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1491.045249][T18905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1491.054033][T18905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1491.080786][T18905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1491.138275][T18905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1491.141329][T18905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1491.160259][T18905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1491.178521][T18905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1491.189547][T18905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1491.228023][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1491.228879][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1491.229289][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1491.230992][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1491.235087][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1491.235927][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1491.236706][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1491.237118][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1491.262161][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1491.266068][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1491.445003][T23427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.496346][T23489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.719052][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.719214][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.760457][T15825] bridge_slave_1: left allmulticast mode [ 1491.760495][T15825] bridge_slave_1: left promiscuous mode [ 1491.760725][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.799871][T15825] bridge_slave_0: left allmulticast mode [ 1491.799911][T15825] bridge_slave_0: left promiscuous mode [ 1491.800156][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.125527][T24004] netlink: 'syz.5.5094': attribute type 4 has an invalid length. [ 1492.157847][T15825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1492.161763][T15825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1492.171323][T15825] bond0 (unregistering): Released all slaves [ 1492.186247][T24005] netlink: 'syz.5.5094': attribute type 4 has an invalid length. [ 1492.196847][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.196967][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1493.127493][T15825] hsr_slave_0: left promiscuous mode [ 1493.152333][T15825] hsr_slave_1: left promiscuous mode [ 1493.154188][T15825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.154218][T15825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.158825][T15825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.158853][T15825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.279020][T15825] veth1_macvtap: left promiscuous mode [ 1493.279074][T15825] veth0_macvtap: left promiscuous mode [ 1493.279209][T15825] veth1_vlan: left promiscuous mode [ 1493.279300][T15825] veth0_vlan: left promiscuous mode [ 1493.323395][T18905] Bluetooth: hci3: command tx timeout [ 1493.325303][ T5615] Bluetooth: hci0: command tx timeout [ 1494.268556][T15825] team0 (unregistering): Port device team_slave_1 removed [ 1494.315289][T15825] team0 (unregistering): Port device team_slave_0 removed [ 1494.749965][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1494.899205][T23427] veth0_vlan: entered promiscuous mode [ 1495.056704][T23427] veth1_vlan: entered promiscuous mode [ 1495.404027][T18905] Bluetooth: hci3: command tx timeout [ 1495.404026][ T5615] Bluetooth: hci0: command tx timeout [ 1495.653208][T23427] veth0_macvtap: entered promiscuous mode [ 1495.765714][T23427] veth1_macvtap: entered promiscuous mode [ 1495.960129][T15825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.062551][T23489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.141141][T23427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.178202][T24066] fuse: Bad value for 'fd' [ 1496.296844][T15825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.346969][T23427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.373296][T11479] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.387342][ T38] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.389703][T21490] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.389771][T21490] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.520295][T15825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.482065][ T5615] Bluetooth: hci0: command tx timeout [ 1497.482547][ T5615] Bluetooth: hci3: command tx timeout [ 1497.716947][T15825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.183788][T23986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.183914][T23986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.184117][T23986] bridge_slave_0: entered allmulticast mode [ 1498.187711][T23986] bridge_slave_0: entered promiscuous mode [ 1498.226928][T23986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.228913][T18376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.228940][T18376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.235277][T23986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.235500][T23986] bridge_slave_1: entered allmulticast mode [ 1498.250798][T23986] bridge_slave_1: entered promiscuous mode [ 1498.602342][T23986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.606314][T23986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.666748][ T3252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.666782][ T3252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.705094][T23986] team0: Port device team_slave_0 added [ 1498.795786][T23986] team0: Port device team_slave_1 added [ 1498.958444][T23986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.958482][T23986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.958531][T23986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.089786][T23986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.089812][T23986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.089861][T23986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.553706][T23989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.553836][T23989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.554023][T23989] bridge_slave_0: entered allmulticast mode [ 1499.563073][ T5615] Bluetooth: hci3: command tx timeout [ 1499.563116][ T5615] Bluetooth: hci0: command tx timeout [ 1499.609373][T23989] bridge_slave_0: entered promiscuous mode [ 1499.631486][T23989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.631607][T23989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.631788][T23989] bridge_slave_1: entered allmulticast mode [ 1499.659464][T23989] bridge_slave_1: entered promiscuous mode [ 1499.758677][T15825] bridge_slave_1: left allmulticast mode [ 1499.758716][T15825] bridge_slave_1: left promiscuous mode [ 1499.758977][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.787615][T15825] bridge_slave_0: left allmulticast mode [ 1499.787650][T15825] bridge_slave_0: left promiscuous mode [ 1499.788259][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.948346][T24119] FAULT_INJECTION: forcing a failure. [ 1499.948346][T24119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.948403][T24119] CPU: 0 UID: 0 PID: 24119 Comm: syz.6.5112 Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.948459][T24119] Tainted: [L]=SOFTLOCKUP [ 1499.948474][T24119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1499.948498][T24119] Call Trace: [ 1499.948511][T24119] [ 1499.948527][T24119] dump_stack_lvl+0x100/0x190 [ 1499.948589][T24119] should_fail_ex.cold+0x5/0xa [ 1499.948641][T24119] _copy_from_user+0x2e/0xd0 [ 1499.948702][T24119] __sys_bpf+0x2f5/0x4a30 [ 1499.948774][T24119] ? __pfx___sys_bpf+0x10/0x10 [ 1499.948831][T24119] ? find_held_lock+0x2b/0x80 [ 1499.948887][T24119] ? futex_wake+0x4ea/0x5e0 [ 1499.948952][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.949009][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.949085][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.949133][T24119] ? rcu_read_lock_any_held+0x6a/0x90 [ 1499.949196][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.949244][T24119] ? find_held_lock+0x2b/0x80 [ 1499.949300][T24119] ? ksys_write+0x190/0x250 [ 1499.949362][T24119] ? ksys_write+0x190/0x250 [ 1499.949428][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.949498][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.949545][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.949593][T24119] ? __x64_sys_futex+0x358/0x4d0 [ 1499.949650][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.949700][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1499.949747][T24119] ? xfd_validate_state+0x129/0x190 [ 1499.949796][T24119] ? __x64_sys_bpf+0xce/0x140 [ 1499.949855][T24119] __x64_sys_bpf+0xce/0x140 [ 1499.949918][T24119] ? do_syscall_64+0xae/0x790 [ 1499.949979][T24119] do_syscall_64+0x123/0x790 [ 1499.950035][T24119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.950076][T24119] RIP: 0033:0x7efc05b9e199 [ 1499.950107][T24119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.950144][T24119] RSP: 002b:00007efc06a02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1499.950183][T24119] RAX: ffffffffffffffda RBX: 00007efc05e25fa0 RCX: 00007efc05b9e199 [ 1499.950210][T24119] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 1499.950237][T24119] RBP: 00007efc05c350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1499.950262][T24119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.950287][T24119] R13: 00007efc05e26038 R14: 00007efc05e25fa0 R15: 00007ffdd089fe38 [ 1499.950340][T24119] [ 1500.587516][T15825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.629065][T15825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.639676][T15825] bond0 (unregistering): Released all slaves [ 1500.761220][T23986] hsr_slave_0: entered promiscuous mode [ 1500.773876][T23986] hsr_slave_1: entered promiscuous mode [ 1500.774761][T23986] debugfs: 'hsr0' already exists in 'hsr' [ 1500.774790][T23986] Cannot create hsr debugfs directory [ 1500.880000][T23989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.965428][T23989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.044453][T23489] veth0_vlan: entered promiscuous mode [ 1501.055737][ T5824] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1501.212192][ T5824] usb 6-1: device descriptor read/64, error -71 [ 1501.291736][T23989] team0: Port device team_slave_0 added [ 1501.361529][T23989] team0: Port device team_slave_1 added [ 1501.371438][T23489] veth1_vlan: entered promiscuous mode [ 1501.452086][ T5824] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1501.574102][T23989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.574128][T23989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.574171][T23989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.582258][ T5824] usb 6-1: device descriptor read/64, error -71 [ 1501.672599][T22103] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1501.673725][T15825] hsr_slave_0: left promiscuous mode [ 1501.676232][T15825] hsr_slave_1: left promiscuous mode [ 1501.677193][T15825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1501.677219][T15825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1501.692989][ T5824] usb usb6-port1: attempt power cycle [ 1501.696377][T15825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1501.696404][T15825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1501.764758][T15825] veth1_macvtap: left promiscuous mode [ 1501.764810][T15825] veth0_macvtap: left promiscuous mode [ 1501.764939][T15825] veth1_vlan: left promiscuous mode [ 1501.765028][T15825] veth0_vlan: left promiscuous mode [ 1501.822022][T22103] usb 7-1: Using ep0 maxpacket: 8 [ 1501.822930][T22103] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1501.827221][T22103] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1501.827282][T22103] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1501.827328][T22103] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1501.827374][T22103] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1501.827442][T22103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.601420][T22103] usb 7-1: GET_CAPABILITIES returned 0 [ 1502.601484][T22103] usbtmc 7-1:16.0: can't read capabilities [ 1502.752268][ T5824] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1502.772743][ T5824] usb 6-1: device descriptor read/8, error -71 [ 1502.833126][T24131] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1502.835352][ T5730] usb 7-1: USB disconnect, device number 17 [ 1502.917608][T15825] team0 (unregistering): Port device team_slave_1 removed [ 1502.939159][T15825] team0 (unregistering): Port device team_slave_0 removed [ 1503.012328][ T5824] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1503.033139][ T5824] usb 6-1: device descriptor read/8, error -71 [ 1503.106714][T23989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.106743][T23989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.106783][T23989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.145355][ T5824] usb usb6-port1: unable to enumerate USB device [ 1503.418110][T23989] hsr_slave_0: entered promiscuous mode [ 1503.421799][T23989] hsr_slave_1: entered promiscuous mode [ 1503.423184][T23989] debugfs: 'hsr0' already exists in 'hsr' [ 1503.423213][T23989] Cannot create hsr debugfs directory [ 1503.445764][T23489] veth0_macvtap: entered promiscuous mode [ 1503.451253][T23489] veth1_macvtap: entered promiscuous mode [ 1503.717564][T23489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1503.797787][T23489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1504.495450][T11479] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.507479][T15825] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.510374][T15825] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.582754][T22978] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.661866][T11479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.661900][T11479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.888686][T18376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.888720][T18376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.928274][T23986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1505.952401][T23986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1505.954882][T23986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1505.981316][T23986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1505.993688][T23986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1506.011190][T23986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1506.041998][T23986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1506.072210][ T5809] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1506.114655][T23986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1506.202674][ T5809] usb 6-1: device descriptor read/64, error -71 [ 1506.292864][T23989] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.442448][ T5809] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1506.559106][ T6227] corsair-cpro 0003:1B1C:0C10.004F: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1506.574622][ T5809] usb 6-1: device descriptor read/64, error -71 [ 1506.611285][T24214] [ 1506.613642][T24214] ================================ [ 1506.618743][T24214] WARNING: inconsistent lock state [ 1506.623855][T24214] syzkaller #0 Tainted: G L [ 1506.629842][T24214] -------------------------------- [ 1506.634950][T24214] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 1506.641827][T24214] syz.6.5136/24214 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 1506.648261][T24214] ffff88805303c468 (&ccp->wait_input_report_lock){+.?.}-{3:3}, at: ccp_raw_event+0x59/0x130 [ 1506.658424][T24214] {IN-SOFTIRQ-W} state was registered at: [ 1506.664141][T24214] lock_acquire+0x1d1/0x380 [ 1506.668756][T24214] _raw_spin_lock+0x2e/0x40 [ 1506.673387][T24214] ccp_raw_event+0x59/0x130 [ 1506.678004][T24214] __hid_input_report.constprop.0+0x319/0x470 [ 1506.684194][T24214] hid_irq_in+0x55d/0x710 [ 1506.688638][T24214] __usb_hcd_giveback_urb+0x38e/0x610 [ 1506.694129][T24214] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1506.699436][T24214] dummy_timer+0xdaf/0x3820 [ 1506.704051][T24214] __hrtimer_run_queues+0x462/0x9c0 [ 1506.709367][T24214] hrtimer_run_softirq+0x1ca/0x360 [ 1506.714590][T24214] handle_softirqs+0x1e6/0x9d0 [ 1506.719449][T24214] __irq_exit_rcu+0x16a/0x210 [ 1506.724484][T24214] irq_exit_rcu+0x9/0x30 [ 1506.728820][T24214] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1506.734554][T24214] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1506.740634][T24214] pv_native_safe_halt+0xf/0x20 [ 1506.745589][T24214] default_idle+0x9/0x10 [ 1506.749944][T24214] default_idle_call+0x6c/0xb0 [ 1506.754820][T24214] do_idle+0x3ae/0x5b0 [ 1506.758991][T24214] cpu_startup_entry+0x4f/0x60 [ 1506.763858][T24214] rest_init+0x2d3/0x2e0 [ 1506.768235][T24214] start_kernel+0x48e/0x490 [ 1506.772845][T24214] x86_64_start_reservations+0x24/0x30 [ 1506.778417][T24214] x86_64_start_kernel+0x12b/0x130 [ 1506.783639][T24214] common_startup_64+0x13e/0x158 [ 1506.788683][T24214] irq event stamp: 43 [ 1506.792652][T24214] hardirqs last enabled at (43): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 1506.802824][T24214] hardirqs last disabled at (42): [] _raw_spin_lock_irqsave+0x52/0x60 [ 1506.812562][T24214] softirqs last enabled at (0): [] copy_process+0x29b5/0x8380 [ 1506.821687][T24214] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 1506.828967][T24214] [ 1506.828967][T24214] other info that might help us debug this: [ 1506.837017][T24214] Possible unsafe locking scenario: [ 1506.837017][T24214] [ 1506.844458][T24214] CPU0 [ 1506.847726][T24214] ---- [ 1506.850993][T24214] lock(&ccp->wait_input_report_lock); [ 1506.856568][T24214] [ 1506.860030][T24214] lock(&ccp->wait_input_report_lock); [ 1506.865755][T24214] [ 1506.865755][T24214] *** DEADLOCK *** [ 1506.865755][T24214] [ 1506.873905][T24214] locks held by syz.6.5136/24214: 1, last CPU#1: [ 1506.880231][T24214] #0: ffff88808ecd4060 (&uhid->devlock){+.+.}-{4:4}, at: uhid_char_write+0x6b/0x10e0 [ 1506.889853][T24214] [ 1506.889853][T24214] stack backtrace: [ 1506.895743][T24214] CPU: 1 UID: 0 PID: 24214 Comm: syz.6.5136 Tainted: G L syzkaller #0 PREEMPT(full) [ 1506.906695][T24214] Tainted: [L]=SOFTLOCKUP [ 1506.911013][T24214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1506.921065][T24214] Call Trace: [ 1506.924343][T24214] [ 1506.927272][T24214] dump_stack_lvl+0x100/0x190 [ 1506.931973][T24214] print_usage_bug.part.0+0x258/0x340 [ 1506.937362][T24214] mark_lock+0x956/0x1020 [ 1506.941700][T24214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1506.947347][T24214] ? lock_acquire+0x1d1/0x380 [ 1506.952042][T24214] __lock_acquire+0x8e2/0x1f40 [ 1506.956861][T24214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1506.962520][T24214] lock_acquire+0x1d1/0x380 [ 1506.967037][T24214] ? ccp_raw_event+0x59/0x130 [ 1506.971740][T24214] ? find_held_lock+0x2b/0x80 [ 1506.976444][T24214] _raw_spin_lock+0x2e/0x40 [ 1506.980959][T24214] ? ccp_raw_event+0x59/0x130 [ 1506.985655][T24214] ccp_raw_event+0x59/0x130 [ 1506.990178][T24214] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1506.996003][T24214] __hid_input_report.constprop.0+0x319/0x470 [ 1507.002117][T24214] ? __pfx_ccp_raw_event+0x10/0x10 [ 1507.007249][T24214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1507.012904][T24214] uhid_char_write+0xb6b/0x10e0 [ 1507.017771][T24214] vfs_write+0x2aa/0x1050 [ 1507.022133][T24214] ? __pfx_uhid_char_write+0x10/0x10 [ 1507.027431][T24214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1507.033078][T24214] ? lock_acquire+0x1d1/0x380 [ 1507.037769][T24214] ? __fget_files+0x34/0x3d0 [ 1507.042371][T24214] ? __pfx_vfs_write+0x10/0x10 [ 1507.047173][T24214] ? find_held_lock+0x2b/0x80 [ 1507.051871][T24214] ? __fget_files+0x215/0x3d0 [ 1507.056562][T24214] ? __fget_files+0x215/0x3d0 [ 1507.061249][T24214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1507.066902][T24214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1507.072580][T24214] ? __fget_files+0x21f/0x3d0 [ 1507.077294][T24214] ksys_write+0x1f8/0x250 [ 1507.081653][T24214] ? __pfx_ksys_write+0x10/0x10 [ 1507.086530][T24214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1507.092187][T24214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1507.097840][T24214] do_syscall_64+0x123/0x790 [ 1507.102455][T24214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.108361][T24214] RIP: 0033:0x7efc05b9e199 [ 1507.112778][T24214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.132418][T24214] RSP: 002b:00007efc069e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1507.140841][T24214] RAX: ffffffffffffffda RBX: 00007efc05e26090 RCX: 00007efc05b9e199 [ 1507.148813][T24214] RDX: 0000000000000012 RSI: 0000200000000500 RDI: 0000000000000003 [ 1507.156786][T24214] RBP: 00007efc05c350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1507.164759][T24214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.172731][T24214] R13: 00007efc05e26128 R14: 00007efc05e26090 R15: 00007ffdd089fe38 [ 1507.180716][T24214] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1507.203746][ T5809] usb usb6-port1: attempt power cycle [ 1507.275399][T23989] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.330468][ T6227] corsair-cpro 0003:1B1C:0C10.004F: probe with driver corsair-cpro failed with error -71 [ 1507.552052][ T5809] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1507.605852][T23989] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.749460][T23989] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.893991][T18376] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.070503][T18376] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.184841][T18376] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.414950][T18376] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.768444][T18376] bridge_slave_1: left allmulticast mode [ 1508.768480][T18376] bridge_slave_1: left promiscuous mode [ 1508.768661][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.801211][ T5809] usb 6-1: device descriptor read/8, error -71 [ 1508.832027][T18376] bridge_slave_0: left allmulticast mode [ 1508.832063][T18376] bridge_slave_0: left promiscuous mode [ 1508.832240][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.128123][T18376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1509.130587][T18376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.133216][T18376] bond0 (unregistering): Released all slaves [ 1509.333487][T18376] hsr_slave_0: left promiscuous mode [ 1509.334004][T18376] hsr_slave_1: left promiscuous mode [ 1509.334588][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1509.334615][T18376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1509.336153][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.336178][T18376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1509.387223][T18376] veth1_macvtap: left promiscuous mode [ 1509.387268][T18376] veth0_macvtap: left promiscuous mode [ 1509.387367][T18376] veth1_vlan: left promiscuous mode [ 1509.387432][T18376] veth0_vlan: left promiscuous mode [ 1509.629812][T18376] team0 (unregistering): Port device team_slave_1 removed [ 1509.649315][T18376] team0 (unregistering): Port device team_slave_0 removed [ 1509.999993][T18376] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.018820][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1510.040008][T18376] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.119350][T18376] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.167904][T18376] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.463944][T18376] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.498765][T18376] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.530809][T18376] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.560527][T18376] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.657794][T18376] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.698238][T18376] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.740378][T18376] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.779980][T18376] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.884671][T18376] bridge_slave_1: left allmulticast mode [ 1510.884708][T18376] bridge_slave_1: left promiscuous mode [ 1510.884872][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.886257][T18376] bridge_slave_0: left allmulticast mode [ 1510.886286][T18376] bridge_slave_0: left promiscuous mode [ 1510.886440][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.928170][T18376] bridge_slave_1: left allmulticast mode [ 1510.928205][T18376] bridge_slave_1: left promiscuous mode [ 1510.928358][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.930093][T18376] bridge_slave_0: left allmulticast mode [ 1510.930127][T18376] bridge_slave_0: left promiscuous mode [ 1510.930267][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.950130][T18376] bridge_slave_1: left allmulticast mode [ 1510.950160][T18376] bridge_slave_1: left promiscuous mode [ 1510.950313][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.968989][T18376] bridge_slave_0: left allmulticast mode [ 1510.969019][T18376] bridge_slave_0: left promiscuous mode [ 1510.969171][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.005524][T18376] bridge_slave_1: left allmulticast mode [ 1511.005572][T18376] bridge_slave_1: left promiscuous mode [ 1511.005720][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.007615][T18376] bridge_slave_0: left allmulticast mode [ 1511.007645][T18376] bridge_slave_0: left promiscuous mode [ 1511.007791][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.038660][T18376] bridge_slave_1: left allmulticast mode [ 1511.038691][T18376] bridge_slave_1: left promiscuous mode [ 1511.038841][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.058208][T18376] bridge_slave_0: left allmulticast mode [ 1511.058239][T18376] bridge_slave_0: left promiscuous mode [ 1511.058384][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.219737][T18376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.221512][T18376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.256668][T18376] bond0 (unregistering): Released all slaves [ 1511.320824][T18376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.340423][T18376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.352074][T18376] bond0 (unregistering): Released all slaves [ 1511.415362][T18376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.417445][T18376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.418580][T18376] bond0 (unregistering): Released all slaves [ 1511.489853][T18376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.491717][T18376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.526794][T18376] bond0 (unregistering): Released all slaves [ 1511.593810][T18376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.596005][T18376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.597291][T18376] bond0 (unregistering): Released all slaves [ 1512.298345][T18376] hsr_slave_0: left promiscuous mode [ 1512.298931][T18376] hsr_slave_1: left promiscuous mode [ 1512.299564][T18376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.300059][T18376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.309339][T18376] hsr_slave_0: left promiscuous mode [ 1512.315059][T18376] hsr_slave_1: left promiscuous mode [ 1512.315755][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.315787][T18376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.337296][T18376] hsr_slave_0: left promiscuous mode [ 1512.343439][T18376] hsr_slave_1: left promiscuous mode [ 1512.348916][T18376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.351288][T18376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.377580][T18376] hsr_slave_0: left promiscuous mode [ 1512.385159][T18376] hsr_slave_1: left promiscuous mode [ 1512.385980][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.386019][T18376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.391257][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1512.391290][T18376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.420049][T18376] hsr_slave_0: left promiscuous mode [ 1512.427273][T18376] hsr_slave_1: left promiscuous mode [ 1512.427995][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.428027][T18376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.433680][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1512.433710][T18376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.475539][T18376] veth1_macvtap: left promiscuous mode [ 1512.475605][T18376] veth0_macvtap: left promiscuous mode [ 1512.475738][T18376] veth1_vlan: left promiscuous mode [ 1512.475844][T18376] veth0_vlan: left promiscuous mode [ 1512.477143][T18376] veth1_macvtap: left promiscuous mode [ 1512.477193][T18376] veth0_macvtap: left promiscuous mode [ 1512.477308][T18376] veth1_vlan: left promiscuous mode [ 1512.477393][T18376] veth0_vlan: left promiscuous mode [ 1512.478647][T18376] veth1_macvtap: left promiscuous mode [ 1512.478691][T18376] veth0_macvtap: left promiscuous mode [ 1512.478799][T18376] veth1_vlan: left promiscuous mode [ 1512.478866][T18376] veth0_vlan: left promiscuous mode [ 1512.799288][T18376] team0 (unregistering): Port device team_slave_1 removed [ 1512.818926][T18376] team0 (unregistering): Port device team_slave_0 removed [ 1512.961078][T18376] team0 (unregistering): Port device team_slave_1 removed [ 1512.970966][T18376] team0 (unregistering): Port device team_slave_0 removed [ 1513.100761][T18376] team0 (unregistering): Port device team_slave_1 removed [ 1513.109651][T18376] team0 (unregistering): Port device team_slave_0 removed [ 1513.249980][T18376] team0 (unregistering): Port device team_slave_1 removed [ 1513.259601][T18376] team0 (unregistering): Port device team_slave_0 removed [ 1513.389680][T18376] team0 (unregistering): Port device team_slave_1 removed [ 1513.412305][T18376] team0 (unregistering): Port device team_slave_0 removed [ 1514.534662][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1514.865727][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4